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SYSTEM AND METHODS FOR PROVING DATES IN DIGITAL DATA FILES 

Background of the Invention 

Field of the Invention 

The present invention relates generally to digital data files, and more particularly to a 
5 personal computer (PC) system and methods for proving dates in such digital data files. 
Statement of the Prior Art 

Scone of the Problem 

Digital data files come in many formats. None of those formats currently provide means for 
proving — with certainty — dates and times associated with access, creation, modification, receipt, 
10 or transmission of such digital data files. This is not only due to the variety of application programs 
which are available for digital data file access, creation, modification, receipt, and transmission, but 
also due to the much more varied "standards" and protocols put forth in the vain attempt to provide 
uniformity worldwide. 

Illustrative of the enormity of the problem are the following operating environments, within 
1 5 which the system and methods according to the present invention can provide the much-needed but 
often ignored time certainty. 

Digital Document Processing 

"Processing" may be viewed as the manipulation of data within a computer system. Since 
virtually all computer systems today process digital data, processing is the vital step between 

20 receiving the data in binary format (i.e, input), and producing results (/.<?., output) — the task for 
which computers are designed. 

The Microsoft® Press Computer Dictionary. 3d Edition (1997) defines the term document 
as ".. . any self-contained piece of work created with an application program and, if saved on disk, 
given a unique filename by which it can be retrieved." Most people think of documents as material 

25 done by word processors alone. To the typical computer, however, data is little more than a 

collection of characters. Therefore, a database, a graphic, or a spreadsheet can all be considered as 
much a document as is a letter or a report. In the Macintosh environment in particular, a document 
is any user-created work named and saved as a separate file. 

Accordingly, for the purpose of the invention described herein, digital document processing 

30 shall be interpreted to mean the manipulation of digital (i.e., binary) data within a computer system 
to create or modify any self-contained piece of work with an application program and, if saved on a 
disk or any other memory means, given a unique filename by which it can be retrieved. Examples 
ofsuch application programs with which the present invention may be used to assist in such digital 
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document processing are Microsoft® Access 97, Microsoft® Excel 97, and Microsoft® Word 97, 
each available from Microsoft Corporation, Redmond, Washington U.S A, 
Digital Communications 

"Communications" may be broadly defined as the vast discipline encompassing the 
5 methods, mechanisms, and media involved in information transfer. In computer-related areas, 
communications usually involve data transfer from one computer to another through a 
communications medium, such as a telephone, microwave relay, satellite link, or physical cable. 

Two primary methods of digital communications among computers presently exist. One 
method temporarily connects two computers through a switched network, such as the public 

10 telephone system. The other method permanently or semipermanently links multiple workstations 
or computers in a network. In reality, neither method is distinguishable from the other, because a 
computer can be equipped with a modem, which is often used to access both privately owned and 
public access network computers. 

More particular forms of digital communications (i.e.. exchange of communications in 

1 5 which all of the information is transmitted in binary-encoded, digital format) include electronic 
mail (or less formally "e-mail**), facsimile, voicemail, and multimedia communications. 

E-mail may be broadly defined as the exchange of text messages/computer files over a 
communications network, such as a local area network (LAN) or the Internet, usually between 
computers or terminals. Facsimile (or, again, less formally "fax") comprises the transmission and 

20 reception of text or graphics over telephone lines in digitized form. Conventional fax machines 
scan an original document, transmit an image of the document as a bit map, and reproduce the 
received image on a printer. Resolution and encoding of such fax messages are standardized in the 
CCITT Groups 1-4 recommendations. Fax images can likewise be sent and received by computers 
equipped with fax hardware and software. 

25 The CCITT Groups 1-4 recommendations make up a set of standards recommended by the 

Comite Consultatif International Telegraphique et Telephonique (now known as the International 
Telecommunication Union) for encoding and transmitting images over fax machines. Groups 1 and 
2 relate to analog devices, which are generally out of use. Groups 3 and 4 deal with digital devices, 
and are outlined below. 

30 Group 3 is a widespread standard that supports "standard" images of 203 horizontal dots per 

inch (dpi) by 98 vertical dpi, and "fine" images of 203 horizontal dpi by 198 vertical dpi. Group 3 
devices support two methods of data compression. One is based on the Huffman code, and reduces 
an image to 10 to 20 percent of the original. The other, known as "READ" (for "relative element 
address designate"), compresses an image to about six to twelve percent (~6% - 12%) of its 
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original. Additionally, the READ method provides for password protection as well as polling, so 
that a receiving machine can request transmission as appropriate. 

Group 4 is a newer standard, which supports images of up to 400 dpi. Its method of data 
compression is based on a beginning row of white pixels, or "dots", with each succeeding line 
5 encoded as a series of changes from the line before. Images are compressed to about three to ten 
percent (~ 3% - 10) of the original. Group 4 devices do not include error-correction information in 
their transmission. Moreover, they require an Integrated Services Digital Network (ISDN) phone 
line rather than a traditional dial-up line. 

Fax modems may also be used to send and receive digital data encoded in known fax 

10 formats {e.g., one of the CCITT groups noted above). Such data is either sent or received by a fax 
machine or another modem, which then decodes the data and converts it to an image. If the data 
was initially sent by fax modem, the image must previously have been encoded on the computer 
hosting such fax modem. Text and graphic documents can be converted into fax format by special 
software that is usually provided with the fax modem. Paper documents must first be scanned in. 

15 As is well known, fax modems may be internal or external and may combine fax and conventional 
modem capabilities. 

Voicemail generally comprises a system that records and stores telephone messages in a 
computer's memory. Unlike a simple answering machine, voicemail systems include separate 
mailboxes for multiple users, each of whom can copy, store, or redistribute messages. Another type 

20 of digital communications involving voice is 'Voice messaging", a term which generally refers to a 
system that sends and receives messages in the form of sound recordings. Typical voice messaging 
systems may employ "voice modems", which are modulation/demodulation devices that support a 
switch to facilitate changes between telephony and data transmission modes. Such a device might 
contain a built-in loudspeaker and microphone for voice communication, but more often it uses the 

25 computer's sound card. 

Still another form of digital communications includes multimedia communications in the 
style of 'Video teleconferencing", as defined by the International Telecommunication Union 
(formerly CCITT) in "Visual Telephone Systems and Equipment for Local Area Networks Which 
Provide a Non-Guaranteed Quality of Service," (Recommendation H.323, Telecommunication 

30 Standardization Sector of ITU, Geneva, Switzerland, May 1 996) and other similar such standards. 
Digital Imaging 

"Digital imaging" encompasses those known processes involved in the capture, storage, 
display, and printing of graphical images. They may involve devices known as a "digital camera", 
which broadly refers to a camera that stores photographed images ^electronically instead of on 
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traditional film. Digital cameras typically use charge-coupled device (CCD) elements to capture 
the image through the lens when the operator releases the shutter in the camera. Circuits within the 
camera cause the image captured by the CCD to be stored in a storage medium, such as solid-state 
memory or a hard disk. After the image has been captured, it is downloaded by cable to the 
5 computer using software supplied with the camera. Once stored in the computer, the image can be 
manipulated and processed much like the image from a scanner or related input devices. Digital 
cameras come in the form of still cameras and full-motion video recorders. 

Other forms of digital imaging include digitizing systems, such as the "PhotoCD®" system 
from Eastman Kodak Company, Rochester, New York. That system allows 35mm film pictures, 

10 negatives, slides, and scanned images to be stored on a compact disc. Images are then stored in a 
file format known as the Kodak PhotoCD Image Pac File Format, or PCD. Many photography and 
film development businesses offer this service. Any computer with CD-ROM capabilities can 
usually view images stored on a PhotoCD and the software required to read PCD. Additionally, 
such images can be viewed by any one of a variety of players that are specifically designed to 

15 display images stored on CDs. Another photographic form of digital imaging is defined by the 
"Flashpix" specification, the cooperative endeavor of the Digital Imaging Group, Microsoft, the 
Hewlett-Packard Company, and Live Picture, Inc. The Flashpix format builds on the best features 
of existing formats (e.g., Kodak Image Pac, Live Picture IVUE, Hewlett-Packard JPEG, TIFF, 
TIFF/EP, etc.), and combines these features with an object orientated approach. 

20 Still other forms of digital imaging include digital radiography, radiotherapy, x-ray, positron 

emission tomography, ultrasound, and magnetic resonance imaging according to the joint work of 
the American College of Radiology (ACR) and the National Electrical Manufacturers Association 
(NEMA), published in the Digital Imaging and Communications in Medicine PS 3-1998 (DICOM 
Standard). 
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Di gital Commerce 

An enormous amount of commercial activity now takes place by means of connected 
computers. Such commercial activity has been variously coined as digital commerce, electronic 
commerce, or just plain E-commerce. Regardless of its particular moniker, these activities 
5 generically involve a commercial transaction between a user and a vendor through an online 

information service, the Internet, or a BBS, or between vendor and customer computers through a 
specialized form of E-commerce known as electronic data interchange (EDI). 

EDI is collectively known for its set of standards to control the transfer of business 
documents {e.g., purchase orders and invoices) between computers. The ultimate goal of EDI is the 
10 elimination of paperwork and increased response time. For EDI to be most effective, users must 
agree on certain standards for formatting and exchanging information, such as the X.400 protocol 
and CCITT X series. 

Other known forms of E-commerce include digital banking, web-front stores, and online 
trading of bonds, equities, and other securities. Digital banking can take the form of access to a 

15 user's account, payment of bills electronically, or transfer of funds between a user's accounts. 

Web-front stores (e.g., amazon.com) usually comprise a collection of web pages in the form of an 
electronic catalog, which offers any number of products for sale. More often than not, transactions 
at such web-front stores are consummated when a purchaser enters his credit card number, and the 
issuing bank approves the purchase. These transactions may or may not be over secure lines, such 

20 as those designated "TRUSTe" participant web sites. Further details regarding known processes 
for establishing and maintaining secure E-commerce connections may be found in the SET Secure 
Electronic Transaction Specification, Book 1 : Business Description (Version 1.0), May 31, 1997, 
the contents of which are incorporated herein by reference. See also Book 2 (Programmer's Guide) 
and Book 3 (Formal Protocol Definition) of the SET Secure Electronic Transaction Specification, , 

25 as well as the External Interface Guide to SET Secure Electronic Transaction , September 24, 1997, 
each of which is incorporated herein by reference. 

One burgeoning form of E-commerce that has arisen in the past few years is that which 
involves dealing in securities online. "Day traders" watch impatiently as ticker symbols speed 
across their computer screens. When the price is right, they electronically whisk their order off to a 

30 distant securities dealer — often buying and selling the same stock or bond in a fifteen-minute span 
of time. One can only imagine the potential problems associated with the purchase or sale of 
securities when price-per-share movements on the order of a few cents make the difference to these 
day traders. Fortunately, the National Association of Securities Dealers (NASD) has come up with 
its Order Audit Trail Systems (OATS SM ) to track all stock transactions. NASD Rule 6953 also 
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requires all member firms that have an obligation to record order, transaction, or related data under 
the NASD Rules or Bylaws to synchronize the business clocks that are used for recording the date 
and time of any market event. Computer system and mechanical clocks must be synchronized 
every business day before market open, at a minimum, in order to ensure that recorded order event 
5 timestamps are accurate. 

Digital Justice 

Even legal scholars and systems around the world have been unable to escape the problems 
of an online world. Utah became the first jurisdiction in the United States of America to enact 
legislation creating "cybernotaries". Similar laws in Georgia, Florida, and Massachusetts quickly 
10 followed Utah. 

In August 1996, the Amercian Bar Association (through its Information Security Committee 
of the Electronic Commerce and Information Technology Division, Section of Science and 
Technology) published the Digital Signature Guidelines — Legal Infrastructure for Certification 
Authorities and Secure Electronic Commerce . The European Union, as well, in a final report on the 

15 Legal Issues Of Evidence And Liability In The Provision Of Trusted Services (CA and TTP 
Services) , let its position be known in October 1998. 

Each of the environments noted above is fraught with potential fraud. Any reliance they 
may have on dates and times is merely for the purpose of determining whether the transaction is 
valid (i.e., authorized within a specified range of time), or what specific time delays occur in the 

20 transmission of data between the computer systems communicating with one another. However, 
none of those environments currently provide means for proving — with certainty — dates and 
times associated with access, creation, modification, receipt, or transmission of digital data files, 
which may be used therein. 

Prior Art Attempts to Solve the Problem 

25 Many-varied computing means pervade today's society. PCs, web browsers, e-mail clients, 

e-mail servers, network file servers, network messaging servers, mainframes, Internet appliances, 
wireless telephones, pagers, PDAs, fax machines, fax modems, digital still cameras, video cameras, 
voice recorders, video recorders, copiers, and scanners, and virtually any other device using digital 
data files are fast becoming ubiquitous. 

30 Digital data is easy to modify. As a result, it has been nearly impossible in the prior art to 

establish with certainty the date and time a particular digital data file in a given computing means 
was accessed, created, modified, received, or transmitted. It should be understood that, by use of 
the term "computing means", the present invention is directed to general purpose computers, PCs, 
web browsers, e-mail clients/servers, network file/messaging servers, mainframes, Internet 
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appliances, wireless telephones, pagers, PDAs, fax machines, digital still/video cameras, digital 
voice/video recorders, digital copiers/scanners, interactive television, hybrid combinations of any of 
the above-noted computing means and an interactive television (e.g., set-top boxes), and any other 
apparatus, which generally comprises a processor, memory, the capability to receive input, and the 
5 capability to generate output. 

Such computing means typically include a real time clock ("RTC") for keeping track of the 
time and date. Likewise, operating systems and/or applications programs used in such computing 
means usually stamp the time and date (as derived from the RTC) that each of the digital data files 
is accessed, created, modified, received, or transmitted. Such stamping of digital data files with 

10 times and dates (collectively referred to as "time-stamping") has, thus, become an integral part of 
all of the above known computing environments. 

Although the existing framework of time-stamping can be used to catalogue and sort one's 
own files, for other critical needs it suffers from two fatal flaws. Files are typically 'time-stamped" 
with a value read from the RTC. There is no simple way of determining whether the RTC is set to 

1 5 the correct date and time. Indeed, it is quite trivial for a user to reset the RTC to any desirable date 
and time. Even if the computing means' RTC had been correctly set, nothing would prevent a user 
from arbitrarily changing the "time-stamps" themselves. This is readily accomplished through the 
direct manipulation of the digital data where the time-stamp is stored. 

Thus, the known time-stamping framework is useless for any situation where the accuracy 

20 of the date or time of a digital data file is critical. Court filings, medical records, files presented as 
incriminating or exculpatory evidence in court cases, legal documents such as wills, billing records, 
patent, trademark, and copyright claims, and insurance documents are only a few of the areas where 
the date and time that is associated with the file is critical. Conventional systems and methods that 
time-stamp digital data files fail to meet this need. Furthermore, there is no "open", cross-platform, 

25 interoperable global standard in place to create trusted time-stamps. 
Cryptographic Systems and Keys 

One approach that has been used in the past to provide some level of security in digital data 
files is the use of cryptographic systems and keys. In general, cryptographic systems are used to 
encrypt or "lock" a digital data file. A key is used, conversely, to decrypt or "unlock" an encrypted 
30 digital data file. Digital data files are merely bits of data in memory or on a network. If this data is 
viewed as the mere representation of large numbers, then mathematical functions or algorithms can 
be easily applied to the data. 

For example, where a particular digital data file is a text file, its unencrypted or "cleartext" 
version can be viewed as the variable x. The resulting function of this variable x, when encrypted 
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by its associated cryptographic algorithm and coupled with its key k will be f (k, x). Accordingly, 
the encrypted text or "cyphertext" can be defined by the equation: 

y = f(k,x). 

By choosing the cryptographic algorithm carefully - such that there is no easily discovered inverse 
5 mapping (i.e. f for any given y, it will be extremely difficult to calculate x without knowing k, while 
at the same time, with knowledge of k it will be possible) - the data may be encrypted. 
Symmetric Cryptography 

If the key for encryption and decryption is the same shared secret, then the cryptographic 
system and associated algorithm will be referred to as "symmetric". Both the sender and the 

10 receiver must share the key in such symmetric cryptographic systems. A sender first applies the 
encryption function using the key to the cleartext to produce the cyphertext, which is then sent to a 
receiver. The receiver applies the decryption function using the same shared key. Since the 
cleartext cannot be derived from the cyphertext without knowledge of the key, the cyphertext can 
be sent over public networks such as the Internet. 

15 The current United States standard for symmetric cryptography, in which the same key is 

used for both encryption and decryption, is the Data Encryption Standard (DES), which is based 
upon a combination and permutation of shifts and exclusive ors. This approach can be very fast, 
whether implemented directly on hardware (e.g., 1 GByte/sec throughput or better) or in general 
purpose processors. The current key size of 56 bits (plus 8 parity bits) is sufficient, yet somewhat 

20 small, but the growing use of larger keys with "triple DES" generate much greater security. Since 
the implementation of DES is fast, it can easily be pipelined with software codecs and not impact 
system performance. 

An alternative and yet stronger form of symmetric block encryption is IDEA. Its security is 
based upon combining exclusive ors with addition and multiplication in modulo- 16 arithmetic. The 

25 IDEA approach is also fast on general purpose processors. It is comparable in speed to known DES 
implementations. One major advantage of IDEA is its keys, which are 128 bits and are, thus, much 
stronger (i.e., harder to break) than standard 56-bit DES keys. 

One particular problem with the use of such symmetric systems is the problem of getting the 
sender and the receiver to agree on the key without anyone else finding out. Moreover, the problem 

30 becomes greatly complicated when additional users (i.e., potential senders and receivers) are added 
to the system. Such symmetric cryptographic systems, nevertheless, are by far easier to implement 
and deploy than their asymmetric counterparts since they require far less infrastructure. Sometimes 
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with a symmetric cryptographic system, however, keys are submitted over the network. Avoidance 
of this security risk would be desirable. 
Asymmetric Cryptography 

Systems that generate and employ a secure key pair (i.e., a "private key" for creating the 
5 "digital signature" and a "public key" to verify that digital signature) are typically known as 

asymmetric cryptographic systems. There are many known cryptographic algorithms (e.g., RSA, 
DSA, and Diffie Hellman) that involve a key pair. In such asymmetric cryptographic systems, the 
private key and the public key are mathematically linked. The private key can only decrypt 
anything that is encrypted by the public key. Conversely, the public key can only verify anything 

10 that is signed by the private key. Asymmetric cryptographic systems are, thus, inherently more 
secure than symmetric or shared secret systems. The sensitive private key need exist in only one 
place. No form of the private key is ever transmitted over the network. Typical asymmetric 
cryptographic systems also scale to many users more easily than shared secret systems. However, 
the infrastructure that is necessary to field systems of this type, commonly called a "Public Key 

15 Infrastructure" (PKI), is non-trivial to implement. See, e.g., RFC 1422, Privacy Enhancement for 
Internet Electronic Mail: Part II: Certificate-Based Key Management (Feb. 1996), the contents of 
which are incorporated herein by reference. 
Digital Signatures 

Referring now to Figs. 1 and 2, wherein like reference characters or numbers represent like 
20 or corresponding parts throughout each of the several views, an exemplary process 100 for creating 
a digital signature is shown in Fig. 1 . To sign a document, or for that matter any other digital data 
file, a "signer" must first delimit the borders of the digital data file to be signed. As used herein, 
the term signer refers to any person who creates a digital signature for a message, such as message 
110. The information delimited by the signer, in turn, refers to that message 1 10. A hash function 
25 120 in the signer's software is used to compute a hash result 130, which is unique for all practical 
purposes to the message 1 10. Thereafter, a signing function 140 is used to transform the hash result 
130 into a digital signature 160, but only after input of the signer's private key 150. 

This transformation is sometimes referred to as a process of encryption. However, such a 
characterization would be inaccurate, because message 1 10 itself may, or may not be confidential. 
30 Confidentiality may be provided as an optional feature in most digital signature technologies, but 
the separate and distinct security service of confidentiality is not central to the security services of 
signer authentication, document authentication, or digital data file authentication. In any case, the 
resulting digital signature 160 is unique to both the message 1 10 and the private key 150, which is 
used to create the digital signature 160. 
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Typically, most digital signatures 160 (/.&, the digitally-signed hash result of message 1 10) 
are used in one of two ways. They may be attached to their associated message 110 and, thereafter, 
simply stored. In the alternative, they may be copied 170 and coupled with digital signature 160, in 
the form of a single data element 180 and, thereafter, transmitted 190 to a verifier. 
5 This single data element 180 is, in some cases as will be described in greater detail herein 

below, referred to as a "digital certificate". Furthermore, the digital signature 160 may be simply 
transmitted or stored as a separate data element, so long as it maintains a reliable association with 
its message 1 10. Each digital signature 160 is unique to the specific message 110, which has been 
used to create it. Otherwise, it would be counterproductive if the digital signature 160 was wholly 

1 0 disassociated from that message 110. 

An exemplary verification process 200 for verifying digital signature 160 is shown in Fig. 2. 
Element 180, comprising digital signature 160 attached to message 1 10, is first received 190 from 
the signer. A new hash result 220 of the original message 1 10 is then computed by the verifier by 
means of the same hash function 120 used to create the digital signature 160. 

15 It should be noted at this juncture that use of the term 'to verify" herein, with respect to any 

given digital signature, message, and public key, refers to those processes of accurately determining 
that: (1) the digital signature 160 was created during the "operational period" of a valid certificate 
1 80 by the private key 1 50 corresponding to the public key 260 listed in the certificate 1 80; and (2) 
the message 1 10 had not been altered since its digital signature 160 was created. 

20 It should also be noted at this juncture that use of the term "operational period" herein refers 

to a period that begins on a date and time a certificate 1 80 is issued by a "certification authority", or 
on a later date and time certain if stated in the certificate 180, and ends on a date and time it expires 
or is earlier revoked or suspended. 

Then, by use of the public key 260 and such new hash result 220, the verifier can check: (1) 

25 whether the digital signature 160 was created using the signer's private key 1 50; and (2) whether 
the newly computed hash result 220 matches the original hash result 130, which was transformed 
into the digital signature 160 during the signing process. 

Most known verification software will confirm the digital signature 160 as "verified" if two 
conditions are satisfied. One condition will be satisfied if the signer's private key 150 was used to 

30 digitally sign the message 110. This condition will be met if the signer's public key 260 was used 
to verify the digital signature 160, because the signer's public key 260 is capable of verifying only 
a digital signature 160 that is created with the signer's private key 150. The other condition will be 
satisfied if message 1 10 was received unaltered. This condition will be met if the hash result 220 
that is computed by the verifier turns ouUo be identical to the hash result 130 that is extracted from 
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digital signature 160 during the verification process. A verifier function 240 is used to make these 
comparisons, while further processing of the message 1 10 is dependent upon whether message 1 10 
is determined to be valid at step 280. 
Digital Certificates 

5 The term "digital certificate" as used herein generally refers to any message, which at least 

(1) identifies the certification authority (CA) issuing it; (2) names or identifies its "subscriber"; (3) 
contains the subscriber's public key; (4) identifies its operational period; and (5) is digitally signed 
by the CA issuing it Metaphorically, digital certificates serve as electronic substitutes for a sealed 
envelope or a signer's signature. In one case, for example, VeriSign Digital ID™ (a trademark of 

10 VeriSign, Inc., Mountain View, California) securely resides in a signer's Internet browser or e-mail 
software, and enables that signer to digitally sign and encrypt e-mail. Digital certificates can also 
be viewed as electronic equivalents of a driver's license or a passport. Containing information that 
uniquely identifies the signer, the digital certificate allows the signer to: (1) digitally sign a message 
so the recipient knows that a message actually originated from the signer; and (2) encrypt a 

15 message so the intended recipient can decrypt and read its contents and attachments. Most digital 
certificates are easy to use, with point-and-click interfaces in all of the popular browsers and e-mail 
packages. A person seeking to verify a digital signature needs, at a minimum, (1) the public key 
corresponding to the private key used to create the digital signature, and (2) reliable evidence that 
the public key (and thus the corresponding private key of the key pair) is identified with the signer. 

20 The basic purpose of the digital certificate is to serve both these needs in a reliable manner. 
Dual Signatures 

As noted herein above, digital signatures and digital certificates have both been used in the 
past to provide some level of certainty as to the identity of a particular person accessing, creating, 
modifying, receiving, or transmitting a digital data file. E-commerce presents other challenges for 

25 securing digital data files. In particular, the process of providing secure electronic transactions has 
raised the concerns for maintaining a person's privacy. An approach that has been used in the past 
to provide such security is known as "dual signatures", and is illustrated below. 

User B wants to send User A an offer to purchase a piece of property that User A owns and 
an authorization to his bank to transfer the money if User A accepts the offer. Nevertheless, User B 

30 does not want the bank to see the terms of his outstanding offer to User A, nor does he want User A 
to see his bank account information. User B also wants to link his offer to the transfer such that the 
money will only be transferred if User A accepts his offer. According to the SET Secure Electronic 
Transaction Specification, User B accomplishes all of this by digitally signing both messages with a 
single signature operation that creates a dual signature. 
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Such a dual signature is generated in four steps. First, a message digest is created for both 
messages sent by User B (i.e., one to User A, and one to the bank). The resulting pair of message 
digests is then concatenated together. Next, a message digest of the concatenated result is created. 
This third message digest is finally encrypted with the User B's private signature key. User B must 
5 include the message digest of the other message in order for a recipient to verify his dual signature. 
The recipient of either message can check then its authenticity by generating the message digest on 
its copy of the message, concatenating it with the message digest of the other message (as provided 
by the User B), and thereafter computing the message digest of the result. If the newly generated 
digest matches the decrypted dual signature, the recipient can trust the authenticity of the message. 

10 In the event that User A accepts User B's offer, she sends a message to the bank indicating 

her acceptance and including the message digest of the offer. The bank can verify the authenticity 
of User B's transfer authorization, and ensure that the acceptance is for the same offer by using its 
digest of the authorization and the message digest presented by User A of the offer to validate the 
dual signature. On the one hand, the bank can therefore check the authenticity of the offer against 

1 5 the dual signature. It cannot, on the other hand, see the terms of the offer. 

Further details regarding such known processes may be found in the SET Secure Electronic 
Transaction Specification. Book 1: Business Description (Version 1.0), May 31, 1997, the contents 
of which are incorporated herein by reference. See also Book 2 (Programmer's Guide) and Book 3 
(Formal Protocol Definition) of the SET Secure Electronic Transaction Specification, as well as the 

20 External Interface Guide to SET Secure Electronic Transaction, September 24, 1997, each of which 
is incorporated herein by reference. 

As is best illustrated by reference to Fig. 3, the process of creating such dual signatures will 
now be described in greater detail. User A runs the property description 305 through a one-way 
algorithm 3 10 to produce a unique value known as the message digest 315. This is a kind of digital 

25 fingerprint of the property description 305, and will be used later to test the integrity of the 

message. She then encrypts the message digest 3 1 5 with her private signature key 320 to produce 
her digital signature 325. Next, she generates a random symmetric key 330 and uses it to encrypt 
the combination of the property description 305, her signature 325 and a copy of her certificate 335 
containing her public signature key 340 (collectively referred to as the message 345). 

30 To decrypt the property description 305, user B will require a secure copy of this random 

symmetric key 330. User B's certificate 350, which user A must have obtained prior to initiating 
secure communication with him, contains a copy of his public key-exchange key 355. To ensure 
secure transmission of the symmetric key 330, user A encrypts it first using user B's public key- 
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exchange key 350. The encrypted key, referred to as the digital envelope 360, will then be sent to 
user B along with the encrypted message 345 itself. 

Likewise, the decryption process consists of the following steps. User B receives the 
message 345 from user A and decrypts the digital envelope 360 with his private key-exchange key 
5 365 to retrieve the symmetric key 330. He uses the symmetric key 330 to decrypt the property 
description 305, user A's signature 325, and her certificate 335. He decrypts user A's digital 
signature 325 with her public signature key 340, which he acquires from her certificate 335. This 
recovers the original message digest 3 1 5 of the property description 305. He runs the property 
description 305 through the same one-way algorithm 310 used by user A and produces a new 

10 message digest 370 of the decrypted property description 305. Finally, he compares his message 
digest 370 to the one 315 obtained by use of user A's public signature key 340 contained within her 
digital signature 325. If both digests 315, 370 are exactly the same, user B then confirms that the 
message content has not been altered during transmission and that it was signed using user A's 
private signature key 320. On the other hand, if digests 315, 370 are not the same, then message 

15 305 either originated somewhere else or was altered after it was signed. User B could then elect to 
take some appropriate action, such as notifying user A or discarding the message 305. 
Digital Time-Stamps 

A digital time-stamping service (DTS) issues time-stamps, which associate a date and time 
with a digital document in a cryptographically strong way. The digital time-stamp can be used at a 

20 later date to prove that an electronic document existed at the time stated on its time-stamp. For 
example, a physicist who has a brilliant idea can write about it with a word processor and have the 
document time-stamped. The time-stamp and document together can later prove that the scientist 
deserves the Nobel Prize, even though an arch rival may have been the first to publish. 

The manner in which such conventional time-stamping systems woric is illustrated in Fig. 4. 

25 Hypothetically, a user at a computing means 400 signs a document and wants it time-stamped. The 
user first computes a message digest 420 of the document using a secure hash function, and second 
sends the message digest 420 (but not the document itself) to the DTS 440. The DTS 440 sends the 
user in return a digital time-stamp 460 consisting of the message digest, the date and time it was 
received at the DTS 440, and the signature 480 of the DTS 440. Since the message digest 420 does 

30 not reveal any information about the content of the document, the DTS 440 cannot eavesdrop on 
the documents it time-stamps. Thereafter, the user can ostensibly present the document and time- 
stamp 460 together to prove when the document was written. A verifier then computes the message 
digest 420 of the document, makes sure it matches the digest in the time-stamp 460, and verifies the 
signature 480 of the DTS 440 on the time-stamp 460. 
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To be reliable, the time-stamps must not be forgeable. The DTS 440 itself must have a long 
key if the time-stamps are to be reliable for long periods of time {e.g., several decades). Moreover, 
the private key of the DTS 440 must be stored with utmost security, as in a tamperproof box. The 
date and time must come from a clock, also inside the tamperproof box, which cannot be reset and 
5 which will keep accurate time for years or perhaps for decades. It must also be infeasible to create 
time-stamps without using the apparatus in the tamperproof box. 

All of the above requirements greatly complicate the process of obtaining legally sufficient 
proof of the date and time a digital data file was accessed, created, modified, or transmitted. In 
fact, time-stamping a document in the manner described above only certifies the date and time that 
10 the message digest 420 was received by the DTS. It provides no proof of the date and time that the 
document was accessed, created, modified, or transmitted. Moreover, because the DTS is located 
remotely relative to the user, there is no reliable way to provide a digital time-stamp locally at the 
user's site. 

One cryptographically-strong DTS, first implemented by Bell Communications Research, 

15 Inc. (also known as "Bellcore"), only uses software and avoids many of the requirements just 
described such as tamperproof hardware. It essentially combines hash values of documents into 
data structures known as binary trees. The "root" values of such binary trees are then periodically 
published in the newspaper. In these Bellcore systems, the time-stamp consists of a set of hash 
values, which allow a verifier to recompute the root of the tree. Since the hash functions are one- 

20 way, the set of validating hash values cannot be forged. The time associated with the document by 
the time-stamp is the date of publication. 

The following Bellcore patents are illustrative of the above-described approach: U.S. Patent 
No. 5,136,646, for "Digital Document Time-Stamping With Catenate Certificate" (Haber et al.); 
U.S. Patent No. 5,136,647, for a "Method for Secure Time-Stamping of Digital Documents" (Haber 

25 et al.); U.S. Patent No. 5,373,561, for a "Method for Secure Time-Stamping of Digital Documents" 
(Haber et al.); and U.S. Patent No. Re. 34,954, which is the reissue of the '647 patent noted above 
and is, likewise, directed to a "Method for Secure Time-Stamping of Digital Documents" (Haber et 
al.). Other patents which are illustrative of similar such approaches are U.S. Patent No. 5,748,738, 
for a "System and Method for Electronic Transmission, Storage and Retrieval of Authenticated 

30 Documents" (Bisbee et al.), which is assigned to Document Authentications Systems, Inc.; and U.S. 
Patent No. 5,781,629, for a "Digital Document Authentication System" (Haber et al.), which is 
assigned to Surety Technologies, Inc. The contents of each of the above patents are incorporated 
herein by reference. 
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While each of the above approaches uses software and avoids many of the requirements for 
tamperproof hardware, they still require a trusted source at a remote location. None of the patents 
listed above teach or suggest any system or method that is capable of providing a trustworthy time- 
stamp at the precise location where the user's digital data files are accessed, created, modified, or 
5 transmitted. Moreover, all of the methods described in the patents listed above still leave open the 
possibility that two individuals may collude to falsely state the value of a hash. 

Undetected alterations may still be made with appropriate cryptographic techniques. For 
example, one may alter a document as desired and then make other suppressed changes, such as a 
carriage return followed by a space-up command. Both original document and altered document 

10 may, therefore, have the same hash value. See, for example, B. Schneier, A pplied Cryptography, 
Chapter 3.8, "Timestamping Services", pages 61-65 (John Wiley & Sons, Inc. 1994), the contents 
of which are incorporated herein by reference. 

One approach seeking to avoid such possibilities is described in U.S. Patent No. 5,781,630 
(Huber et al), which discloses a system including a cryptomodule that is coupled to a computer. A 

1 5 cryptomodule in accordance with the Huber at al. patent includes a processor; an interface coupling 
the processor to the computer, and memory containing algorithms and constants for three purposes: 
(1) encoding a document, (2) generating a digital signature to be appended to the document, and (3) 
producing a time-stamp to be inserted into the document. The cryptomodule also includes a pair of 
clocks, one of which is a radio clock and the other of which is a "non-adjustable" quartz clock. 

20 This system according to the '630 patent depends on a comparison of the two clocks before 

inserting a time-stamp into the document. That is, the time that the document was created, edited, 
received, or transmitted is retrieved from both clocks and compared. Any discrepancy between the 
times retrieved is then determined. If, and only if, those discrepancies are sufficiently small, will a 
time-stamp based on the radio clock be inserted into the document and the document then encoded. 

25 Another approach, which seeks to avoid problems of collusion and/or fraud, is described in 

U.S. Patent No. 5,619,571 (Sandstrom et al.). Briefly summarized, Sandstrom et al. discloses an 
improved method of storing or retrieving electronic records, particularly those in the form of image 
streams (e.g., TIFF). An image identification code, time data provided by a trusted source, and a 
password are combined to generate a key. The image identification code and time data are stored 

30 in a public directory associated with the image data stream. Attributes of the image stream (e.g., its 
size and a hash of at least a segment of the image data) are also determined. The attributes are then 
used to generated a verification code. Subsequently, the verification code is first positioned within 
a private area associated with the data image stream, and then the private area is encrypted with the 
previously generated key. 
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This approach, however, suffers from two obvious disadvantages. Not only is it limited to 
image file formats having public and private areas, but it is also still dependent on a remote source 
for the time-stamp and the image identification code. It would be much more desirable to provide 
systems and methods of time-stamping digital data files locally and without the continuing reliance 
5 on a remote trusted source. 

Still another approach to provide authenticated documents, with an authenticated time code, 
is described in U.S. Patent No. 5,1 89,700 (Blandford). Blandford's device includes an RTC and an 
encryption means, which are together sealed in a tamperproof package. Powered by a battery that 
is located outside the tamperproof package, the RTC is used either: (1) to supplant the system clock 
10 of a computer, such that the computer cannot be booted up with an incorrect time; or (2) to provide 
an encrypted authentication code of time. Such time code is derived from a time retrieved from the 
RTC, which is combined with a device identification number. A secret key contained within the 
encryption means then encrypts the combination. 

While devices according to Blandford, in fact, meet the objective of provided a local source 
15 of trusted time, they nevertheless suffer from two major disadvantages. Both disadvantages arise 
out of the design requirements of such devices. First, Blandford requires the RTC to override the 
computer's system clock on boot up. It would be much more desirable to avoid changing system 
settings in the computer, particularly the setting of its system clock. Second, Blandford requires 
that the RTC be powered by a source (i.e., the battery) outside of the tamperproof package. This, it 
20 is suggested, is critical to assuring several objectives: (1) ensuring that the RTC cannot be reset, or 
it can be reset only under strict procedures; (2) allowing the battery to be replaced in the power-up 
state without affecting the RTC; and (3) disabling the device, and potentially even the computer, in 
the event that power from the source failed. Obviously, it would be much more desirable to avoid 
such inconveniences. 
25 Summary of the Invention 

It is, therefore, a general object of the present invention to provide novel systems, apparatus, 
and methods of preventing fraud in digital data files. More specifically, it is a particular object of 
this invention to provide systems, apparatus, methods, and articles of manufacture for proving the 
integrity of digital data files. Another more particular object of the present invention is to provide 
30 such systems, apparatus, methods, and articles of manufacture for time-stamping digital data files, 
which do not continually rely on a remote trusted source of time. 

In accordance with one important aspect of the present invention, the systems and methods 
are directed to computing means. Non-limiting examples of such "computing means" include any: 
general purpose computer, mainframe; PC; wd> browser; e-mail client; e-mail server; network file 
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or messaging server, Internet appliance; wireless telephone; pager; personal digital assistant (PDA); 
fax machine; digital still or video camera; digital voice or video recorder, digital copier or scanner, 
interactive television; hybrid combination of any of the above computing means and an interactive 
television; or any other apparatus comprising a processor, memory, the capability to receive input, 
5 and the capability to generate output. 

The apparatus of the invention also includes computing means programmed with software 
to operate the computing means in accordance with the invention. Non-limiting examples of such 
"computing means" in this regard include general purpose computers and personal computers of 
both client and server variety. Specific, non-limiting examples of such "computing means" in this 

10 regard likewise include any: web browser, e-mail client; e-mail server; network file or messaging 
server, Internet appliance; wireless telephone; pager, personal digital assistant (PDA); fax machine; 
digital still or video camera; digital voice or video recorder, digital copier or scanner; interactive 
television; hybrid combination of any of the above computing means and an interactive television; 
or any other apparatus comprising a processor, memory, the capability to receive input, and the 

1 5 capability to generate output. 

According to another important aspect of the present invention, the article of manufacture 
disclosed herein comprises a computer-readable medium embodying code segments to control a 
computer to perform the invention. Non-limiting examples of such "computer-readable medium" 
in this regard include any: magnetic hard disk; floppy disk; optical disk, (e.g., a CD-ROM, a CD-R, 

20 a CD-RW, or any disk compliant with known DVD standards); magneto-optical disk; magnetic 
tape; memory chip; carrier wave used to carry computer-readable electronic data, such as are used 
in transmitting and receiving e-mail or in accessing a network, including the Internet, intranets, 
extranets, virtual private networks (VPN), local area networks (LAN), and wide area networks 
(WAN); or any other storage device used for storing data accessible by a computer. Non-limiting 

25 examples of "code segments" include not only source code segments and object code segments, but 
also computer programs in any language, instructions, objects, software, or any means for 
controlling a computer. 

The above and other objects and aspects according to the present invention are provided by 
a PC system and methods for proving dates of digital data files, which generally comprises a trusted 

30 time source, means for saving the file at a moment in time, means for retrieving from the trusted 
time source a date and a time corresponding to the moment in time, means for appending the date 
and the time retrieved from the trusted time source to the saved file, means for signing the saved 
file with the date and the time retrieved from the trusted time source appended thereto, means for 
hashing the signed file to produce a digest, means for signing the digest with a key to produce a 
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certificate, means for appending the certificate to the saved file, and means for saving the file with 
the certificate appended thereto. All of the foregoing means are preferably sealed together within a 
tamperproof environment 

Brief Description of the Drawings 
5 Fig. 1 is a block diagram, which illustrates one conventional process for creating a digital 

signature; 

Fig. 2 is a block diagram, which illustrates another conventional process for verifying the 
digital signature created by the process shown in Fig. 1; 

Fig. 3 is a block diagram, which illustrates yet another conventional process of using dual 
10 signatures to maintain privacy in secure electronic transactions; 

Fig. 4 is a block diagram, which illustrates a conventional digital time-stamping service; 

Fig. 5 is a block diagram, which generally illustrates the system according to the present 
invention; 

Fig. 6 is a block diagram, which more specifically illustrates the system shown in Fig. 5; 
15 Fig. 7 is a block diagram of a presently preferred embodiment of the PC system according 

to the present invention; 

Fig. 8 illustrates in greater detail one embodiment of the fraud prevention means shown in 
Figs. 6 and 7; 

Fig. 9 shows a greatly enlarged isometric view of the real time clock chip depicted in Fig. 8; 
20 Fig. 10 depicts the pin layout of the real time clock chip shown in Fig. 9; 

Figs. 1 1(a), 1 1(b), and 1 1(c) illustrate alternative methods of proving the dates and times of 
a digital data file according to one embodiment of the present invention; and 

Figs. 12(a) through 12(d) show datagrams of other time-stamping protocols, which may be 
used in conjunction with the methods illustrated by Figs. 1 1(a), 1 1(b), and 1 1(c). 
25 Detailed Description of the Invention 

A system 500 according to the present invention is shown generally in Fig. 5. System 500 
suitably comprises a computing means 520, an input means 540, and a fraud prevention means 560, 
each of which is operatively coupled together. Computing means 520 more specifically comprises 
a general-purpose computer, such as a personal computer (PC). Input means 540 more specifically 
30 comprises any conventional means of inputting digital data to a PC such as a keyboard, a mouse, a 
touchpad, etc. 

Suitable such keyboards include those of the type manufactured by Key Tronic Corporation, 
Spokane, WA, U.S.A., and sold under the trademark Lifetime™. These include the Lifetime 
Classic™, a standard 104-key keyboard adapted for use with PS/2 or AT-style keyboard ports; the 
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Lifetime Classic Wireless™, a battery-operated standard keyboard adapted for use with PS/2 or 
AT-style keyboard ports through infrared means; the Lifetime Trackball™ and Lifetime Trackball 
Wireless™, both of which are standard keyboards with an integrated trackball mechanism; and, the 
Lifetime Touchpad™ and Lifetime Touchpad Wireless™, both of which are standard keyboards 
5 having an integrated touchpad. 

Other suitable input means 540 include those of the type manufactured by Interlink 
Electronics, Camarillo, CA, U.S.A., which employ VersaPad® and VersaPoint® technologies. 
These include the Model VP9000 ePad™, a semiconductive touchpad and pen input pad that 
combines the functionalities of a PC touchpad pointing device and a WinTab-compatible graphics 

10 digitizer tablet; the DeskStick™ stationary desktop mouse; the RemotePointPLUS™ cordless, 

programmable mouse; and the Freedom WriterPRO™, a wireless, "all in one" PC input device that 
replaces pen, mouse, and keyboard for Internet conferencing, group meetings and presentations. 

Computing means 520 and input means 540 together, thus, provide a system for creating a 
digital data file (not shown in Fig. 5). The digital data file is initially created by the computing 

15 means 520, either: (1) by entry of data through the input means 540; or, (2) storage of data in the 
computing means 520. Such storage of data in the computing means 520 may be accomplished 
through any number of conventional avenues (e.g., e-mail, downloading the digital data file from 
an Internet website, ftp transfers, and transfers by way of removable media, such as magnetic media 
including floppy disks, "Super Disks", Clik! ™, Zip™ and Jaz™ disks (all of which are trademarks 

20 of Iomega Corporation, Roy, UT, U.S.A.); optical media, such as CD-ROM, CD-R, CD-RW and 
DVD; magneto-optical media, etc.). 

In the event that a user (not shown) of the computing means 520 locally creates the digital 
data file, such digital data file would subsequently be saved at a moment in time. Fraud prevention 
means 560 is used, according to a particularly important aspect of the present invention, to secure 

25 the digital data file by maintaining its integrity in the following manner. An unalterable time-stamp 
is affixed to the digital data file by fraud prevention means 560 by way of computing means 520. 
Such a time-stamp may thereafter be used to confirm the date and time associated with any access, 
creation, modification, receipt, or transmission of the digital data file. 

Several embodiments of the present invention will now be described herein after in greater 

30 detail with reference to Figs. 7-10. However, as shown in Fig. 6, fraud prevention means 560 

generally comprises a trusted local time source 610, means 620 for retrieving from that local time 
source 610 a date and a time corresponding to the moment in time that the digital data file was 
accessed, created, modified, received, or transmitted; means 630 for appending the date and the 
time retrieved from the trusted time source 610 to the saved digital data file; means 640 for signing 



WO 01/03363 



PCIYUS00/18259 



the saved digital data file with the date and the time retrieved from the trusted time source 610 
appended thereto; means 650 for hashing the signed digital data file to produce a digest; means 660 
for signing the digest with a key 670 to produce a certificate; means 680 for appending the 
certificate to the saved digital data file; and means 690 for saving the digital data file with the 
5 certificate appended thereto. 

Referring now to Fig. 7, a block diagram of a presently preferred embodiment of the PC 
system 700 according to the present invention is shown. System 700 generally comprises a server 
720, having a keyboard 740 attached thereto for inputting digital data into the server 720, fraud 
prevention means 760 for proving with certainty the dates and times that digital data files contained 

10 within the server 720 were accessed, created, modified, stored, or transmitted, and a monitor 780 
for displaying such files. As an option, server 720 may include verification means 780, which are 
adapted to verify the authenticity of a date and time-stamp affixed to such digital data files. 

According to one presently preferred embodiment of this invention, the fraud prevention 
means 760 is contained within the server 720 in the form of its motherboard 800 (Fig. 8). One such 

15 motherboard 800 is manufactured by Intel Coiporation, Santa Clara, California U.S.A., under the 
model name "N440BX Server". It is a flat "baseboard*' design and features a dual Pentium® II 
processor-based server system that provides a high-performance platform optimized for 100 MHz 
system bus operation. 

Baseboard 800 utilizes a conventional Intel 440BX PCIset to maximize system performance 
20 for 32-bit application software and operating systems. Its high performance is due, in large part, to 
a 100 MHz processor/memory architecture, which is complemented with an array of other features. 
Through the use of dual processors, PC system 700 is adapted to be fully MPS 1.4-compliant, with 
appropriate Slot 1 Pentium II processor extensions. Additionally, support can be provided for MP 
operating systems that may not be fully MPS 1 .4-corapliant. The following provides an overview 
25 of the baseboard 800. However, further details regarding baseboard 800, as well as its assembly, 
operation, and maintenance may be found in the "Enterprise Server Group Intel N440BX Server 
Technical Product Specification (Version 1.0), Order Number 243701-001 (February, 1998), 
available from Intel Corporation, Santa Clara, California U.S.A., which is incorporated herein by 
reference. 

30 Baseboard 800 is optimized to function only with the Pentium II processor SEC cartridges 

(not shown). Nevertheless, it should be understood that other suitable motherboard and baseboard 
designs may be used according to the present invention. The Pentium II processor core/Ll cache 
appears on one side of a pre-assembled printed circuit board, approximately 2.5" x 5" in size, with 
the L2 cache on the backside. The L2 cache and processor core/Ll cache communicate with each 
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other using a private bus isolated from the processor host bus. This Pentium II processor L2 cache 
bus operates at half of the processor core frequency. Initially, only caching of 512MB of main 
memory is supported. All accesses above 512MB are not cached, and result in slower accesses to 
the memory in that range. 
5 The Pentium II processor package follows the Single Edge Contact (SEC) cartridge form 

factor, which is adapted to be inserted within respective "Slot 1" connectors 802 and provides a 
thermal plate for heatsink attachment with a plastic cover located opposite the thermal plate. Each 
processor contains a local APIC section for interrupt handling. When two processors are installed, 
the pair must be of identical revision, core voltage, and bus/core speeds. If only one processor is 

10 installed, the other Slot 1 connector 802 must have a terminator card (not shown) installed. 

Baseboard 800 facilitates two embedded VRM 8.1 -compliant voltage regulators (i.e., DC- 
to-DC converters) to provide VCCP to each of the Pentium II processors. One VRM is powered 
from the 5V supply and the other by the 12V supply. Each VRM automatically determines the 
proper output voltage as required by each processor. 

15 The baseboard 800 only supports 100MHz, PC/100-compliant SDRAM DIMMs. However, 

other motherboards and baseboards according to the present invention may support of types of 
memory. Both registered and unbuffered types of memory devices on such DIMMs are supported. 
Baseboard 800 provides four DIMM sites 804. While ECC (72-bit) DIMMs are presently preferred 
for use with the baseboard 800, other memory alternatives may be employed. 

20 A PIDC4 820 provides a local 1MB interface to SDRAM DIMM information, SDRAM clock 

buffer control, and processor core speed configuration. The BIOS code uses this interface during 
auto-configuration of the processor/memory subsystem, as part of the overall server management 
scheme. 

The primary I/O bus for the baseboard 800 is PCI-compliant with Revision 2.1 of the PCI 
25 (£&, Personal Computer Interface) Specification, which is incorporated herein by reference. The 
PCI bus on the baseboard 800 supports embedded SCSI, network control, video, and a multi- 
function device that provides a PCI-to-IS A bridge, bus master IDE controller, Universal Serial Bus 
(USB) controller, and power management controller. The PCI bus also supports four slots 806 for 
full-length PCI add-in cards, one of which is shared with one of two ISA slots 808. 
30 An embedded SCSI controller 8 10 on the baseboard 800 preferably comprises a Symbios 

SYM53C876 dual function controller. Further details regarding this device may be found in the 
"SYM53C876/876E PCI-Dual Channel SCSI Multi-Function Controller" data manual, Ver. 2.0 
(November 1997), published by Symbios Logic Inc. (now owned by LSI Logic Corporation, 
Milpitas, California, U.S.A.). As is known, this device provides both Ultra wide and legacy narrow 
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SCSI interfaces as two independent PCI functions. It should be noted, furthermore, that both of the 
PIIX4 820 and SCSI controller 810 are "multi-function" PCI devices that provide separate sets of 
configuration registers for each function, while sharing a single PCI hardware connection. Further 
details of such multi-function devices may be found in the PCI Specification. 
5 A network interface 812 on baseboard 800 is implemented using an Intel 82558 to provide a 

10/100Mbit Ethernet interface supporting lObaseT and lObaseTX, integrated with an RJ45 physical 
interface. This network interface 812 also provides "Wake-On-LAN" functionality if the power 
supply supports a minimum of 800mA of 5 V standby current, which is configurable via baseboard 
jumper. 

10 An embedded SVGA-compatible video controller 814 is also provided on baseboard 800. It 

preferably comprises a CL-GD5480 64-bit SGRAM GUI Accelerator, manufactured by Cirrus 
Logic, Inc., Fremont, California, U.S.A. Further details regarding such accelerators may be found 
in the "CL-GD5480 Advance Data Book, Ver. 1.0 (November 1996), which is incorporated herein 
by reference. The SVGA subsystem also contains 2MB of SGRAM {i.e., synchronous graphics 

1 5 RAM) 8 1 6, which is typically provided as a factory build option and is not upgradeable. 

Baseboard 800 contains a full-featured ISA I/O subsystem with two full length ISA slots 
808 (one shared with a PCI slot 806), and local ISA bus interface to embedded Superl/O, I/O APIC, 
Flash BIOS, Basic Utility Device (BUD), and server management features. Compatibility I/O on 
the baseboard 800 is most preferably implemented using a PC87309VLJ chip 818, manufactured by 

20 National Semiconductor Corporation, Santa Clara, California, U.S.A. This chip 818 integrates a 
floppy disk controller, keyboard and mouse controller, two enhanced UARTs, full IEEE 1284 
parallel port, and support for power management. It also provides separate configuration register 
sets for each supported function. Connectors are provided for all compatibility I/O devices. 

The baseboard 800 also incorporates an Intel S82093AA Advanced Programmable Interrupt 

25 Controller 816 to handle interrupts in accordance with Multiprocessor Specification 1.4. The BIOS 
for baseboard 800 suitably resides in an Intel 28F008S5 FlashFile™ 8Mbit, symmetrically blocked 
(64KB) flash device 822. Baseboard 800 also incorporates a Dallas 82CH10 micro-controller as 
baseboard management controller (BMC) 824. The BMC 824 controls and monitors server 
management features on the baseboard, and provides the ISA interface to two independent IMB- 

30 based serial buses. On the baseboard 800, all functions of the former Front Panel Controller (FPC) 
and the Processor Board Controller (PBC) are integrated into the BMC 824. This includes power 
supply on/off control, hard reset control, video blanking, watchdog timers, Fault Resilient Booting 
(FRB) functionality, and all temperature, voltage, fan and chassis intrusion monitoring. BMC 824 
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can be polled for current status, or configured to automatically send an alert message when an error 
condition is detected either manually or by software. 

In addition, the baseboard 800 preferably provides a server management feature known as 
EMP (Emergency Management Port). This allows, when using an external modem, remote reset, 
5 power up/down control, and access to the event log, or run-time information. This port also 
supports console redirection and with additional software support, the EMP can also be used to 
download firmware and BIOS upgrades in future upgrades. 

The baseboard 800 provides a Basic Utility Device (BUD) 826 for ISA and PCI interrupt 
routing, SMI/NMI routing, and PCI arbitration expansion. Preferably, the BUD 826 comprises a 
10 7128 CPLD, manufactured by Altera Corporation, San Jose, California, U.S.A. Other features 

formerly handled by an external CPLD on previous servers, such as the host ISA interface to server 
management functions, now appear in the BMC 824. 

The termination circuitry required by the Pentium II processor bus (GTL+) signaling 
environment and the circuitry to set the GTL+ reference voltage, are implemented directly on the 
1 5 SEC cartridges (not shown). Baseboard 800 provides 1 .5 V GTL+ termination power (VTT), and 
VRM 8.1 -compliant DC-to-DC converters to provide processor power (VCCP) at each connector. 
Power for the primary processor is derived from the + 12V supply, while the secondary processor 
utilizes the +5 V supply using an embedded DC-DC converter onboard. Both VRMs are on the 
baseboard 800. 

20 Logic is provided on the baseboard 800 to detect the presence and identity of any installed 

processor or termination cards. If, for example, only one Pentium II processor SEC cartridge is 
installed in a system, a termination card must be installed in the vacant SEC connector to ensure 
reliable system operation. The termination card contains GTL+ termination circuitry, clock signal 
termination, and Test Access Port (TAP) bypassing for the vacant connector. The board will not 

25 boot if a termination card is not installed in the vacant slot. 

A processor/PCI bridge/memory subsystem according to the present invention consists of 
support for one to two identical Pentium II processor cartridges, and up to four SDRAM DIMMs. 
The support circuitry on the baseboard 800 consists of the following: (a) an Intel 440BX (NBX) 
PCI host bridge, memory, and power management controller chip; (b) the dual 100MHz system bus 

30 Slot 1 edge connectors 802 that accept identical Pentium II processors; (c) processor cards (if using 
1 processor, a GTL+ terminator card goes in the empty slot); (d) four 168-pin DIMM connectors 
804 for interface to SDRAM memory; and (e) processor host bus GTL+ support circuitry, including 
termination power supply, embedded DC-to-DC voltage converters for processor power, an APIC 
bus, miscellaneous logic for reset configuration, processor card presence detection, and an ITP port. 
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The NBX is a BGA device with a 3.3V core and mixed 5V, 3.3V, and GTL+ signal 
interface pins. The PCI host bridge 828 in the NBX provides the sole pathway between processor 
and I/O systems, performing control signal translations and managing the data path in transactions 
with PCI resources onboard. This includes translation of 64-bit operations in the GTL+ signaling 
5 environment at 100MHz, to a 32-bit PCI Rev. 2.1 compliant, 5V signaling environment at 33MHz. 

The NBX also handles arbitration for PCI bus master access. Although the NBX is capable 
of being clocked to operate with multiple processor system bus frequencies, on the baseboard 800 
the host bridge 828 only supports a 100MHz system bus. The device also features 32-bit 
addressing, 4 or 1 deep in-order and request queue (IOQ), dynamic deferred transaction support, 
1 0 and Desktop Optimized (DTO) GTL bus driver support (i.e., gated transceivers for reduced power 
operation). The PCI interface provides greater than 1 00 MB/s data streamlining for PCI to 
SDRAM accesses (120 MB/s for writes), while supporting concurrent processor host bus and PCI 
transactions to main memory. This is accomplished using extensive data buffering, with processor- 
to-SDRAM and PCI-to-SDRAM write data buffering and write-combining support for processor- 
1 5 to-PCI burst writes. 

The NBX also performs the function of memory controller for the baseboard 800. Total 
memory of 32MB to 256MB per DIMM is supported. Although the memory controller supports a 
variety of memory devices, the baseboard 800 implementation only supports PC/100 compliant, 72- 
bit, unbuffered or registered SDRAM DEMMs. Further information regardiong such supported 
20 devices may be found in the "PC/100 SDRAM Specification", as well as the 4-Clock 100MHz 64- 
bit and 72-bit Unbuffered SDRAM DIMM, and 4-Clock 100MHz 64-bit and 72-bit Unbuffered 
SDRAM DIMM documentation, all of which is incorporated herein by reference. 

The NBX further provides ECC that can detect and correct single-bit errors (SED/SEC), and 
detect all double-bit and some multiple-bit errors (DED). Parity checking and ECC can be 
25 configured under software control; higher performance is possible if ECC is disabled (1 clock 
savings). At initial power-up, ECC and parity checking are disabled. 

APIC Bus Interrupt notification and generation for the dual processors is done using an 
independent path between local APICs in each processor and the Intel I/O APIC 816 located on the 
baseboard 800. This simple bus consists of two data signals and one clock line. PC-compatible 
30 interrupt handling is done by the PIIX4 820, with all interrupts delivered to the processor via the 
INTR line. However, reduced interrupt latency is possible when the APIC bus delivers interrupts in 
uni-processor operation (if supported by the OS). 

The PIDC4 820 contains a real-time clock 830 with battery backup from an external battery 
832. It also contains 242 bytes of general purpose battery backed CMOS system configuration 



WO 01/03363 



PCT/US00/18259 



RAM. On the baseboard 800, these functions are duplicated in the Superl/O chip 814. However, in 
accordance with yet another important aspect of the present invention, real-time clock 830 shown in 
Fig. 8 is replaced with a more secure, tamperproof version as follows. 

As shown in Figs. 9 and 10, a real time clock assembly 900 comprises DIP form factor real 
5 time clock chip 1 000 and its corresponding socket 1060. The real time clock 900 of the present 
invention is designed as a direct upgrade replacement for the models DS 12887 and DS12C887 real 
time clocks, manufactured by Dallas Semiconductor Corporation, Dallas, Texas U.S.A.), or for the 
MCI 4681 family of real time clocks manufactured by Motorola Inc., Schaumburg, Illinois U.S. A. 
As is known, such conventional real time clocks predominate the market for real time clocks used 
10 in PCs. 

A century byte is added to memory location 50, 32h, as called out by the PC AT 
specification. A lithium energy source, quartz crystal, and write-protection circuitry are contained 
within a 24-pin dual in-line package as shown in greater detail in Fig. 10. As such, the real time 
clock 1000 is a complete subsystem replacing 16 components in a typical application. The 
15 functions include a nonvolatile time-of-day clock, an alarm, a one-hundred-year calendar, 

programmable interrupt, square wave generator, and 113 bytes of nonvolatile static RAM. The real 
time clock 1000 is distinctive in that time-of-day and memory are maintained even in the absence 
of power. 

The real time clock function will continue to operate and all of the RAM, time, calendar, 
20 and alarm memory locations remain nonvolatile regardless of the level of the Vcc input. When Vcc 
is applied to the real time clock 1000 and reaches a level of greater than 4.25 volts, the device 
becomes accessible after 200 ms, provided that the oscillator is running and the oscillator 
countdown chain is not in reset. This time period allows the system to stabilize after power is 
applied. When V C c falls below 4.25 volts, the chip select input is internally forced to an inactive 
25 level regardless of the value of CS at the input pin. The real time clock 1000 is, therefore, write- 
protected. When the real time clock 1000 is in a write-protected state, all inputs are ignored and all 
outputs are in a high impedance state. When Vcc falls below a level of approximately 3 volts, the 
external Vcc supply is switched off and an internal lithium energy source supplies power to the real 
time clock and the RAM memory. 
30 GND and Vcc - DC power is provided to the device, respectively, on pins #12 (shown as 

element 1024 in Fig. 10) and #24 (1048). V cc is the +5 volt input. When 5 volts are applied within 
normal limits, the device is fully accessible and data can be written and read. When V C c is below 
4.25 volts typical, reads and writes are inhibited. However, the timekeeping function continues 
unaffected by the lower input voltage. As V C c falls below 3 volts typical, the RAM and timekeeper 
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are switched over to an internal lithium energy source. The timekeeping function maintains an 
accuracy of ±1 minute per month at 25°C regardless of the voltage input on the Vcc pin 1048. 

The MOT (or "Mode Select") pin 1002 offers the flexibility to choose between two bus 
types. When connected to Vcc, Motorola bus timing is selected. When connected to GND or left 
disconnected, Intel bus timing is selected. The pin 1002 has an internal pull-down resistance of 
approximately 20KW. 

The SQW (or "Square Wave Output") pin 1046 can output a signal from one of 13 taps 
provided by the 15 internal divider stages of the real time clock 1000. The frequency of the SQW 
pin 1 046 can be changed by programming an internal Register A, as described in greater detail 
herein below. The SQW signal can be turned on and off using the SQWE bit in another internal 
Register B, as is also described in greater detail herein below. The SQW signal is not available 
when V C c is less than 4.25 volts typical. 

The "Multiplexed Bidirectional Address/Data Bus" comprises pins AD0-AD7, 1008, 1010, 
1012, 1014, 1016, 1018, 1020, 1022, together which saves pins because address information and 
data information time share the same signal paths. The addresses are present during the first 
portion of the bus cycle and the same pins and signal paths are used for data in the second portion 
of the cycle. Address/data multiplexing does not slow the access time of the real time clock 1000 
since the bus change from address to data occurs during the internal RAM access time. Addresses 
must be valid prior to the falling edge of AS/ALE, at which time the real time clock 1000 latches 
the address from ADO to AD6 1008, 1010, 1012, 1014, 1016, 1018, 1020, 1022. Valid write data 
must be present and held stable during the latter portion of the DS or WR pulses. In a read cycle 
the real time clock 1000 outputs 8 bits of data during the latter portion of the DS or RD pulses. The 
read cycle is terminated and the bus returns to a high impedance state as DS transitions low in the 
case of Motorola timing or as RD transitions high in the case of Intel timing. 

The AS (or "Address Strobe Input") pin 1028 provides a positive going address strobe 
pulse, which serves to demultiplex the bus. The falling edge of AS/ALE causes the address to be 
latched within the real time clock 1000. The next rising edge that occurs on the AS bus will clear 
the address regardless of whether CS is asserted. Access commands should be sent in pairs. 

The DS/RD (or "Data Strobe or Read Input") pin 1034 has two modes of operation 
depending on the level of the MOT pin 1002. When the MOT pin 1002 is connected to V C c, 
Motorola bus timing is selected. In this mode DS is a positive pulse during the latter portion of the 
bus cycle and is called Data Strobe. During read cycles, DS signifies the time that the real time 
clock 1000 is to drive the bidirectional bus. In write cycles the trailing edge of DS causes the real 
time clock 1000 to latch the written data. When the MOT pin 1002 is connected to GND, Intel bus 
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timing is selected. In this mode the DS pin 1034 is called R«ad (RD). RD identifies the time 
period when the real time clock 1000 drives the bus with read data. The RD signal is the same 
definition as the Output Enable (OE) signal on a typical memory. 

The R/W (or "Read/Write Input") pin 1030 also has two modes of operation. When the 
5 MOT pin 1002 is connected to V C c for Motorola timing, R/W is at a level which indicates whether 
the current cycle is a read or write. A read cycle is indicated with a high level on R/W while DS is 
high. A write cycle is indicated when R/W is low during DS. When the MOT pin 1002 is 
connected to GND for Intel timing, the R/W signal is an active low signal called WR. In this mode 
the R/W pin 1030 has the same meaning as the Write Enable signal (WE) on generic RAMs. 

10 A Chip Select signal must be asserted low for a bus cycle in the real time clock 1000 to be 

accessed This is done through the CS (or "Chip Select Input") pin 1026. CS must be kept in the 
active state during DS and AS for Motorola timing and during RD and WR for Intel timing. Bus 
cycles which take place without asserting CS will latch addresses but no access will occur. When 
V C c is below 4.25 volts, the real time clock 1000 internally inhibits access cycles by internally 

15 disabling the CS input. This action protects both the real time clock data and RAM data during 
power outages. 

The IRQ (or "Interrupt Request Output") pin 1038 is an active low output of the real time 
clock 1000 that can be used as an interrupt input to a processor. The IRQ output remains low as 
long as the status bit causing the interrupt is present and the corresponding interrupt-enable bit is 

20 set. To clear the IRQ pin 1038, the processor program normally reads an internal Register C, as is 
also described in greater detail herein below. 

The RESET (or "Reset Input") pin 1036 also clears pending interrupts. When no interrupt 
conditions are present, the IRQ level is in the high impedance state. Multiple interrupting devices 
can be connected to an IRQ bus. The IRQ bus is an open drain output and requires an external pull- 

25 up resistor. The RESET pin 1036 has no effect on the clock, calendar, or RAM. On power-up the 
RESET pin 1036 can be held low for a time in order to allow the power supply to stabilize. The 
amount of time that RESET is held low is dependent on the application. However, if RESET is 
used on power-up, the time RESET is low should exceed 200 ms to make sure that the internal 
timer that controls the real time clock 1000 on power-up has timed out. When RESET is low and 

30 Vcc is above 4.25 volts, the following occurs. 

First, a "Periodic Interrupt Enable" (PEI) bit is cleared to zero. The, an "Alarm Interrupt 
Enable" (AIE) bit is cleared to zero. An "Update Ended Interrupt Flag" (UF) bit is subsequently 
cleared to zero, followed by the same action for an "Interrupt Request Status Flag" (IRQF), and a 
"Periodic Interrupt Flag" (PF). 
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The device 1000 is not accessible until RESET is returned high. The an "Alarm Interrupt 
Flag" (AF) bit is cleared to zero, and the IRQ pin 1038 is in the high impedance state. Finally, a 
"Square Wave Output Enable" (SQWE) bit is cleared to zero, as is an "Update Ended Interrupt 
Enable" (UIE) bit 

5 In a typical application RESET can be connected to Vco This connection will allow the 

real time clock 1000 to go in and out of power fail without affecting any of the control registers. 

The address map of the real time clock 1 000 consists of 1 1 3 bytes of user RAM, 1 1 bytes of 
RAM that contain the RTC time, calendar, and alarm data, and four bytes which are used for 
control and status. All 128 bytes can be directly written or read except for the following. Registers 
10 C and D are read-only, as is Bit 7 of Register A, and the high order bit of the seconds byte is read- 
only. 

The time and calendar information is obtained by reading the appropriate memory bytes. 
The time, calendar, and alarm are set or initialized by writing the appropriate RAM bytes. The 
contents of the ten time, calendar, and alarm bytes can be either Binary or Binary-Coded Decimal 
15 (BCD) format. Before writing the internal time, calendar, and alarm registers, the SET bit in 

Register B should be written to a logic one to prevent updates from occurring while access is being 
attempted. In addition to writing the ten time, calendar, and alarm registers in a selected format 
(binary or BCD), the data mode bit (DM) of Register B must be set to the appropriate logic level. 
All ten time, calendar, and alarm bytes must use the same data mode. The set bit in Register B 
20 should be cleared after the data mode bit has been written to allow the real time clock 1000 to 

update the time and calendar bytes. Once initialized, the real time clock 1000 makes all updates in 
the selected mode. The data mode cannot be changed without reinitializing the ten data bytes. 

The 1 13 general purpose nonvolatile RAM bytes are not dedicated to any special function 
within the real time clock 1000. They can be used by the processor program as nonvolatile 
25 memory and are fully available during the update cycle. 

Real time clock 1000 includes three separate, fully automatic sources of interrupt for a 
processor. The alarm interrupt can be programmed to occur at rates from once per second to once 
per day. The periodic interrupt can be selected for rates from 500 ms to 122 ms. The update-ended 
interrupt can be used to indicate to the program that an update cycle is complete. Each of these 
30 independent interrupt conditions is described in greater detail herein below. 

The processor program can select which interrupts, if any, are going to be used. Three bits 
in Register B enable the interrupts. Writing a logic 1 to an interrupt-enable bit permits that 
interrupt to be initiated when the event occurs. A zero in an interrupt-enable bit prohibits the IRQ 
pin 1038 from being asserted from that interrupt condition. If an interrupt flag is already set when 
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an interrupt is enabled, IRQ is immediately set at an active level, although the interrupt initiating 
the event may have occurred much earlier. As a result, there are cases where the program should 
clear such earlier initiated interrupts before first enabling new interrupts. When an interrupt event 
occurs, the relating flag bit is set to logic 1 in Register C. These flag bits are set inde-pendent of 
5 the state of the corresponding enable bit in Register B. The flag bit can be used in a polling mode 
without enabling the corresponding enable bits. The interrupt flag bit is a status bit which software 
can interrogate as necessary. When a flag is set, an indication is given to software that an interrupt 
event has occurred since the flag bit was last read; however, care should be taken when using the 
flag bits as they are cleared each time Register C is read. Double latching is included with Register 

10 C so that bits which are set remain stable throughout the read cycle. All bits which are set (high) 
are cleared when read and new interrupts which are pending during the read cycle are held until 
after the cycle is completed. One, two, or three bits can be set when reading Register C. Each 
utilized flag bit should be examined when read to ensure that no interrupts are lost. 

The second flag bit usage method is with fully enabled interrupts. When an interrupt flag 

1 5 bit is set and the corresponding interrupt enable bit is also set, the IRQ pin is asserted low. IRQ is 
asserted as long as at least one of the three interrupt sources has its flag and enable bits both set. 
The IRQF bit in Register C is a one whenever the IRQ pin is being driven low. Determination that 
the RTC initiated an interrupt is accomplished by reading Register C. A logic one in bit 7 (IRQF 
bit) indicates that one or more interrupts have been initiated by the real time clock 1000. The act of 

20 reading Register C clears all active flag bits and the IRQF bit. 

When the real time clock 1000 is shipped from the factory, the internal oscillator is turned 
off. This feature prevents the lithium energy cell from being used until it is installed in a system. 
A pattern of 010 in bits 4 through 6 of Register A will turn the oscillator on and enable the 
countdown chain. A pattern of 1 IX will turn the oscillator on, but holds the countdown chain of 

25 the oscillator in reset. All other combinations of bits 4 through 6 keep the oscillator off. 

Thirteen of the 15 divider taps are made available to a l-of-15 selector. The first purpose of 
selecting a divider tap is to generate a square wave output signal on the SQW pin 1046. The RS0- 
RS3 bits in Register A establish the square wave output frequency. The SQW frequency selection 
shares its l-of-15 selector with the periodic interrupt generator. Once the frequency is selected, the 

30 output of the SQW pin 1046 can be turned on and off under program control with the square wave 
enable bit (SQWE). 

The periodic interrupt will cause the IRQ pin 1038 to go to an active state from once every 
500 ms to once every 122 ms. This function is separate from the alarm interrupt which can be 
output from once per second to once per day. The periodic interrupt rate is selected using the same 
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Register A bits which select the square wave frequency. Changing the Register A bits affects both 
the square wave frequency and the periodic interrupt output. However, each function has a separate 
enable bit in Register B. The SQWE bit controls the square wave output Similarly, the periodic 
interrupt is enabled by the PEE bit in Register B. The periodic interrupt can be used with software 
5 counters to measure inputs, create output intervals, or await the next needed software function. 

The real time clock 1000 executes an update cycle once per second regardless of the SET 
bit in Register B. When the SET bit in Register B is set to one, the user copy of the double 
buffered time, calendar, and alarm bytes is frozen and will not update as the time increments. 
However, the time countdown chain continues to update the internal copy of the buffer. This 

10 feature allows time to maintain accuracy independent of reading or writing the time, calendar, and 
alarm buffers and also guarantees that time and calendar information is consistent. The update 
cycle also compares each alarm byte with the corresponding time byte and issues an alarm if a 
match or if a "don't care" code is present in all three positions. 

There are three methods that can handle access of the real time clock 1000 that avoid any 

IS possibility of accessing inconsistent time and calendar data. The first method uses the update- 
ended interrupt If enabled, an interrupt occurs after every up date cycle that indicates that over 999 
ms are available to read valid time and date information. If this interrupt is used, the IRQF bit in 
Register C should be cleared before leaving the interrupt routine. 

A second method uses the update-in-progress bit (UIP) in Register A to determine if the 

20 update cycle is in progress. The UIP bit will pulse once per second. After the UIP bit goes high, 
the update transfer occurs 244 ms later. If a low is read on the UIP bit, the user has at least 244 ms 
before the time/calendar data will be changed. Therefore, the user should avoid interrupt service 
routines that would cause the time needed to read valid time/calendar data to exceed 244 ms. 

The third method uses a periodic interrupt to determine if an update cycle is in progress. 

25 The UIP bit in Register A is set high between the setting of the PF bit in Register C. Periodic 
interrupts that occur at a rate of greater than t BUC allow valid time and date information to be 
reached at each occurrence of the periodic interrupt. The reads should be complete within 1 ( t PI/2 
+ 1 BUC ) to ensure that data is not read during the update cycle. 

The real time clock 1000 has four control registers which are accessible at all times, even 

30 during the update cycle. Register A is comprised of the following. 
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The Update In Progress (UIP) bit is a status flag that can be monitored. When the UIP bit is 
a one, the update transfer will soon occur. When UIP is a zero, the update transfer will not occur 
for at least 244 ras. The time, calendar, and alarm information in RAM is fully available for access 
when the UIP bit is zero. The UIP bit is read only and is not affected by RESET. Writing the SET 
5 bit in Register B to a one inhibits any update transfer and clears the UIP status bit. 

These three bits comprising DVO, DV1 , DV2 are used to turn the oscillator on or off and to 
reset the countdown chain. A pattern of 010 is the only combination of bits that will turn the 
oscillator on and allow the real time clock 1000 to keep time. A pattern of 1 IX will enable the 
oscillator but holds the countdown chain in reset The next update will occur at 500 ms after a pat- 
10 tern of 010 is written to DVO, DV1, and DV2. 

The four rate-selection bits comprising RS3, RS2, RSI, RS0 select one of the 13 taps on the 
15-stage divider or disable the divider output The tap selected can be used to generate an output 
square wave (SQW pin) and/or a periodic interrupt. The user can do one of the following: (a) 
enable the interrupt with the PIE bit; (b) enable the SQW output pin with the SQWE bit; (c) enable 
15 both at the same time and the same rate; or (d) enable neither. These four read/write bits are not 
affected by RESET. 



Register B is comprised of the following. 
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When the SET bit is a zero, the update transfer functions normally by advancing the counts 
once per second. When the SET bit is written to a one, any update transfer is inhibited and the 
20 program can initialize the time and calendar bytes without an update occurring in the midst of 
initializing. Read cycles can be executed in a similar manner. SET is a read/write bit that is not 
modified by RESET or internal functions of the real time clock 1000. 

The periodic interrupt enable PIE bit is a read/write bit which allows the Periodic Interrupt 
Flag (PF) bit in Register C to drive the IRQ pin low. When the PEE bit is set to one, periodic 
25 interrupts are generated by driving the IRQ pin low at a rate specified by the RS3-RS0 bits of 

Register A. A zero in the PIE bit blocks the IRQ output from being driven by a periodic interrupt, 
but the Periodic Flag (PF) bit is still set at the periodic rate. PIE is not modified by any internal real 
time clock 1000 functions, but is cleared to zero on RESET. 

The Alarm Interrupt Enable (AIE) bit is a read/write bit which, when set to a one, permits 
30 the Alarm Flag (AF) bit in register C to assert IRQ. An alarm interrupt occurs for each second that 
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the three time bytes equal the three alarm bytes including a "don't care" alarm code of binary 
1 1XXXXXX. When the AIE bit is set to zero, the AF bit does not initiate the IRQ signal. The 
RESET pin 1036 clears AIE to zero. The internal functions of the real time clock 1000 do not 
afFect the AIE bit. 

The Update Ended Interrupt Enable (UIE) bit is a read/write that enables the Update End 
Flag (UF) bit in Regis-ter C to assert IRQ. The RESET pin 1036 going low or the SET bit^oing 
high clears to UIE bit. 

When the Square Wave Enable (SQWE) bit is set to a one, a square wave signal at the 
frequency set by the rate-selection bits RS3 through RS0 is driven out on a SQW pin 1046. When 
the SQWE bit is set to zero, the SQW pin 1046 is held low; the state of SQWE is cleared by the 
RESET pin 1036. SQWE is a read/write bit. 

The Data Mode (DM) bit indicates whether time and calendar information is in binary or 
BCD format. The DM bit is set by the program to the appropriate format and can be read as 
required. This bit is not modified by internal functions or RESET. A one in DM signifies binary 
data while a zero in DM specifies Binary Coded Decimal (BCD) data. 

The 24/12 control bit establishes the format of the hours byte. A one indicates the 24-hour 
mode and a zero indicates the 12-hour mode. This bit is read/write and is not affected by internal 
functions of RESET. 

The Daylight Savings Enable (DSE) bit is a read/write bit which enables two special 
updates when DSE is set to one. On the first Sunday in April the time increments from 1:59:59 
AM to 3:00:00 AM. On the last Sunday in October when the time first reaches 1 :59:59 AM it 
changes to 1 :00:00 AM. These special updates do not occur when the DSE bit is a zero. This bit is 
not affected by internal functions or RESET. 

Register C is comprised of the following. 



MSB LSB 



BIT 7 


BIT 6 


BIT 5 


BIT 4 


BIT 3 


BIT 2 


BIT1 


BIT0 


IRQF 


PF 


AF 


UF 


0 


0 


0 


0 



The Interrupt Request Flag (IRQF) bit is set to a one when one or more of the following are 

true: 

PF = PIE = 1 
AF = AJE=1 
UF = UIE = 1 
That is, IRQF = PF • PIE + AF • AIE + UF • UIE. 
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Any time the IRQF bit is a one, the IRQ pin is driven low. All flag bits are cleared after Register C 
is read by the program or when the RESET pin is low. 

The Periodic Interrupt Flag (PF) is a read-only bit which is set to a one when an edge is 
detected on the selected tap of the divider chain. The RS3 through RSO bits establish the periodic 
rate. PF is set to a one independent of the state of the PIE bit. When both PF and PIE are ones, the 
IRQ signal is active and will set the IRQF bit. The PF bit is cleared by a RESET or a software read 
of Register C. 

A one in the Alarm Interrupt Flag (AF) bit indicates that the current time has matched the 
alarm time. If the AIE bit is also a one, the IRQ pin will go low and a one will appear in the IRQF 
bit A RESET or a read of Register C will clear AF. 

The Update Ended Interrupt Flag (UF) bit is set after each update cycle. When the UIE bit 
is set to one, the one in UF causes the IRQF bit to be a one which will assert the IRQ pin. UF is 
cleared by reading Register C or a RESET. 

Bit 0 through bit 3 are unused bits of the status Register C. These bits always read zero and 
cannot be written. 



Register D is comprised of the following. 

MSB LSB 



BIT 7 


BIT 6 


BIT 5 


BIT 4 


BIT 3 


BIT 2 


BIT 1 


BITO 


VRT 


0 


0 


0 


0 


0 


0 


0 



The Valid RAM and Time (VRT) bit is set to the one state by the manufacturer prior to 
shipment. This bit is not writable and should always be a one when read. If a zero is ever present, 
an exhausted internal lithium energy source is indicated and both the contents of the RTC data and 
RAM data are questionable. This bit is unaffected by RESET. Bit 6 through bit Oof Register Dare 
also not usable. They cannot be written and, when read, they will always read zero. 

Having described in detail the operation and programming of real time clock 1000, further 
details regarding the present invention will now be described. Real time clock 1000, as noted in 
part herein above, is adapted to be a direct replacement for those real time clocks used in most of 
the PCs in present use. According to another particularly important aspect of the present invention, 
therefore, the existing real time clock in a motherboard or baseboard 800 of a PC system 700 is first 
removed from its socket. Then, real time clock 1000 is inserted within socket 1060 by placing each 
of its plurality of pins 1002-1048 in the appropriate holes 1090 in socket 1060. A trusted date and 
time is programmed within real time clock 1000, such that it cannot be changed by a user of the PC 
system 700. Thereafter, hamper-evident means is applied to the installed real time clock 1000, such 
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that removal of the real time clock 1000 would be evident. One suitable tamper-evident means is 
sold by MDCOH Corporation, McLean, Virginia U.S.A. under its "Counterfoil" and Subscribe™ 
technologies. For example, using MIKOH's subsurface laser marking techniques of Subscribe, 
microtext may be applied to a tamper-evident label, which would then identify the real time clock 
5 1 000 by serial number to ensure that the trusted time had been set on installation. The encrypted 
private key, as well as its corresponding public key, could likewise be applied to the label providing 
further security. 

Referring now to Fig. 1 1(a), a presently preferred method of certifying the times and dates 
of a digital data file with the system described herein will now be explained. The method 1 100 

10 involves two separate digital data files — a document 1 102 (i.e., a word processing document) and 
an e-mail 1 104 to which the document 1 102 may be attached for transmission to a remote recipient. 
First, the document 1 102 itself may be certified in the manner described herein before. That is: (1) 
a trusted time source would be provided such that the document 1 102 would be saved at a given 
moment in time at step 1 106; (2) a date and a time corresponding to the moment in time would be 

15 retrieved from the trusted time source at step 1 108; (3) then, the time retrieved from the trusted 
time source would be appended to the saved file at step 1110; (4) the saved file with the date and 
the time retrieved from the trusted time source appended thereto 1112 would be signed at step 
1 1 14; (5) the signed file 1116 would then be hashed to produce a digest 1 1 18 at step 1 120; <6) the 
digest 1118 next would be signed with a key to produce a certificate 1 122 at step 1 124; (7) the 

20 certificate 1 122 then would be appended to the signed and saved file 1 1 16 at step 1 126; and finally 
(8) the file with the certificate appended thereto 1 128 would be saved at step 1 130. 

Alternatively, and referring now also to Fig. 1 1(b), an uncertified document 1 102 could be 
simply attached to the e-mail 1 104. Before sending the e-mail 1 104 with the uncertified document 
1 102 attached thereto, a user could prompt the system to: (1) retrieve, from the trusted time source, 

25 a date and a time corresponding to the moment in time that the "send" button is pushed at step 

1 132; (2) then, the time retrieved from the trusted time source would be appended to the e-mail and 
document combination 1 134 at step 1 136; (3) such a combination 1 134 with the date and the time 
retrieved from the trusted time source appended thereto could be signed at step 1 138; (4) the signed 
combination 1 140 could then be hashed to produce a digest 1 142 at step 1 144; (5) the digest 1 142 

30 could be signed with a key to produce a certificate 1 146 at step 1 148; (6) the certificate 1 146 could 
be appended to the signed and saved combination 1 140 at step 1 1 50; and (7) the resulting 
combination with certificate appended thereto 1 152 could finally be sent at step 1 154. 

As an even further alternative, both the document 1 102 and the e-mail 1 104 could be time- 
certified in the foregoing manner. Not only would the document 1 102 itself have a time-certified 
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time-stamp affixed to prove the time and date of its access, creation, modification, or transmission, 
but also the e-mail 1 104 transmitting such time-certified document 1 102 would be time-certified. 
The importance of the foregoing methods is underscored by past and current efforts in the Internet 
community in regards to time-stamping. 
5 For example, standard protocol RFC 778 DCNET Internet Clock Service (April 1 98 1 ), was 

intended primarily for two purposes — clock synchronization and one-way delay measurements 
with cooperating Internet hosts. It uses the Timestamp and Timestamp Reply messages of the 
Internet Control Message Protocol (ICMP). 

The Internet Clock Service was provided using either ICMP or GGP datagrams. The only 

10 difference between those datagrams is that ICMP uses protocol number 1 and GGP uses protocol 
number 3. Both will be referred to interchangeably as "ICS datagrams" in conjunction with the 
following description of Fig. 12(a), which shows a standard ICS datagram include an internet 
header followed by an ICS header. 

The originator fills in all three timestamp fields 1202, 1204, 1206 just before the datagram 

IS 1200 is forwarded to the net. Each of these fields contain the local time at origination. Although 
the last two are redundant, they allow roundtrip delay measurements to be made using remote hosts 
without time-stamping facilities. The "Type" field 1202 can be either 8 (GGP Echo) or 13 (ICMP 
Timestamp). The "Code" field 1204 should be zero. The "Sequence" field 1206 can contain either 
zero or an optional sequence number provided by the user. The length of the datagram 1200 is, 

20 thus, 36 octets inclusive of the 20-octet internet header and exclusive of the local-network leader. 

The host or gateway receiving ICS datagram 1200 fills in the "Receive Timestamp" field 
1 208 just as the datagram 1 200 is received from the net, and the "Transmit Timestamp" 1210 just 
as it is forwarded back to the sender. It also sets the "Type" field 1 202 to 0 (GGP Echo Reply), if 
the original value was 8, or 14 (ICMP Timestamp Reply), if it was 13. The remaining fields 1204, 

25 1206 are unchanged. 

The timestamp values are in milliseconds from midnight UT and are stored right-justified in 
the 32-bit fields shown in Fig. 12(a). Ordinarily, all time calculations are performed modulo-24 
hours in milliseconds. This provides a convenient match to those operating systems which 
maintain a system clock in ticks past midnight. The specified timestamp unit of milliseconds is 

30 consistent with the accuracy of existing radio clocks and the errors expected in the time-stamping 
process itself 

Delay measurements are made with any DCNET host by simply sending the ICS datagram 
1200 to it and processing the reply. For example, tl, t2 and t3 represent the three timestamp fields 
of the reply in order and t4 the time of arrival at the original sender. Then the delays, exclusive of 
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internal processing within the DCNET host, are simply (t2 - tl) to the DCNET host, (t4 - 13) for the 
return and (t2 - tl) + (t4 - 13) for the roundtrip. In the case of the roundtrip, the clock offsets 
between the sending host and DCNET host cancel. 

Hosts on the Internet that choose to implement a Time Protocol are also expected to adopt 
5 and implement the standard protocol RFC 868 Time Protocol (May 1983). This protocol provides 
a site-independent, machine-readable date and time. A time service sends back to the originating 
source the time in seconds since midnight on January first 1900. The protocol may be used either 
above the Transmission Control Protocol (TCP) or above the User Datagram Protocol (UDP). 

When used via TCP, the time service works as follows: 
10 Server Listen on port 37 (45 octal) 

User Connect to port 37 

Server Send the time as a 32 bit binary number 

User Receive the time 

User Close the connection 

15 Server Close the connection 

Thus, the server listens for a connection on port 37. When the connection is established, the server 
returns a 32-bit time value and closes the connection. If the server is unable to determine the time 
at its site, it should either refuse the connection or close it without sending anything. 

When used via UDP, the time service works as follows: 
20 Server Listen on port 37 (45 octal) 

User Send an empty datagram to port 37 

Server Receive the empty datagram 

Server Send a datagram containing the time as a 32 bit binary number 

Server Receive the time datagram 

25 The server listens for a datagram on port 37. When a datagram arrives, the server returns a 

datagram containing the 32-bit time value. If the server is unable to determine the time at its site, it 
should discard the arriving datagram and make no reply. 

Several Internet Drafts also provides means for time-stamping. One of those is entitled 
"Authentication Scheme Extensions to NTP", Mills, David L., T. S. Glassey, and Michael E. 
30 McNeil, March 1999. The purpose of that draft is to extend the NTP/SNTP authentication scheme 
to support additional features, including Public Key Infrastructure (PKI) cryptography, in order to 
certify the identity of the sender and verify the integrity of the data included in an NTP message, as 
well as provide support for other facilities such as a timestamp and non-repudiation service. 
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The draft describes a new extension field to support the new services. One or more of these 
fields can be included in the NTP header to support designated security services or other services 
should they become necessary. However, the presence of these fields does not affect the operation 
of the NTP timekeeping model and protocol in any other way. In order to preserve existing 
5 interoperability, the presence of these fields is determined by the message length. Ordinary 
(unprotected) NTP messages are 48 octets long. Protected messages include either a 12-octet or 
20-octet Message Authentication Code (MAC), depending on the hash algorithm, presently either 
Data Encryption Standard/Cipher-Bldck Chaining (DES-CBC) or Message Digest 5 (MD5). The 
extension fields are inserted after the unprotected header and before the MAC. If the overall length 

10 of the NTP message is greater than the sum of the protected header length and the longest MAC 
length, one or more extension fields are present. 

Following traditional formats used by Internet protocols, the NTP message consists of some 
number of 4-octet words in big-endian format. The first word contains the total length of the 
extension field in the low-order two octets. The high-order two octets contain a type code to 

1 5 identify the payload content and processing algorithm. In order to preserve alignment appropriate 
for block-encryption algorithms such as DES, the last extension field is zero-padded to the next 
larger integral multiple of eight octets. The hashing algorithm processes the extension fields along 
with the protected header to produce the MAC at the end of the message. Other than hash 
processing, the extension fields are invisible to the ordinary NTP protocol operations. 

20 The payload may include cryptographic media to support any of several cryptographic schemes, 
including the Autokey scheme of NTP Version 4 and other schemes as they are developed. The 
data can include various subfields containing sequence numbers, additional message digests, 
signatures and certificates, as well as the length of these subfields. Additional fields may provide 
means to securely bind arbitrary client data to be signed along with the other information in the 

25 message. The ability to sign arbitrary client data provides an important non-repudiation feature that 
allows this data to be cryptographically bound to an NTP timestamp, together with sender 
credentials and signature. 

With respect to the unprotected NTP header described in RFC 1305 and RFC 2030, the 
NTP header according to the draft noted above has the format 1220 shown in Fig. 12(b). 

30 The 48-octet fixed-length unprotected header includes all fields 1222, 1224, 1226, 1228, 

1230, 1232, 1234, 1236, 1238, 1240, 1242, 1244 through the Transmit Timestamp field 1246. The 
MAC 1250 includes a 4-octet Key Identifier field 1254 followed by a variable length Message 
Digest field 1258 in the format shown in Fig. 12(c). 
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The Message Digest field 1258 length can be either 8 octets for DES-CBC or 16 octets for 
MD5 SHA-1 uses a 20-octet message digest. Selection of which one of the former two supported 
algorithms, or more in the case of additional hash algorithms, is determined from the Key Identifier 
field 1254 as described in greater detail herein below. 
5 The original NTP Version 3 authentication scheme described in RFC 1305 uses a hashing 

algorithm (DES-CBC or MD5) to produce a cryptographic checksum of the unprotected NTP 
header. This checksum is computed by the sender and included along with a private key identifier 
in the MAC 1250. The receiver verifies the checksum using its own copy of the private key. The 
extended scheme proposed for NTP Version 4, uses the extension field described in the draft noted 
10 above, and continues support for the previous scheme and is compatible with the scheme proposed 
therein. 

In both NTP versions a designated hashing algorithm is used to compute the message 
digest. While only DES-CBC and MD5 algorithms are supported in existing implementations, 
other algorithms may be supported in future. Each algorithm may require a specific message digest 

1 5 field length, but not less than 8 octets, nor more than 20 octets. For instance, DES requires an 8- 
octet field, and MD5 requires a 16-octet field, whereas the SHA-1 algorithm, which may be 
supported in the future, requires a 20-octet field. Any of these algorithms hashes the contents of the 
48-octet unprotected header and variable length extension fields, but not the IP addresses, ports or 
MAC 1250 itself, to produce the message digest 1258. 

20 In the NTP Version 3 scheme, the key identifier 1254 is used to select a private 

encryption/decryption key from a predistributed set of keys. Associated with -each key is an 
algorithm identifier, which is defined when the key is created and remains with it for the lifetime of 
the key. The key identifier is used to look up the key and associated algorithm identifier. Thus, no 
specific algorithm identifier field is necessary in the MAC 1250. In the NTP Version 4 schema, 

25 this model is preserved; however, there is a new scheme, called Autokey, which does not require 
prior distribution of keys. In order to preserve legacy, the key identifier space is partitioned in two 
subspaces, one allocated for private keys, the other for randomly generated Autokey keys. This 
distinction is necessary only to clarify how the hashing algorithm is identified and by implication 
how the length of the MAC 1250 can be determined. 

30 Zero, one or more extension fields 1248 can be included between the unprotected header 

and the MAC 1250. Each extension field 1248 (as shown in greater detail in Fig. 12(d)) consists of 
a 4-octet header 1260 and variable length payload 1270. The first two octets of the header (reading 
in big-endian order) contain the type descriptor 1264. The next two octets contain the total 
extension field length 1 268, including the length and type octets, but not any padding at the end. 
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Each extension field 1248 is zero-padded, as necessary, to the next 4-octet alignment; the last field 
is zero-padded to the next 8-octet alignment. The total length of every extension field 1248 must 
be greater than 24 octets, in order to reliably recognize its presence. This value, added to the offset 
of the extension field 1248 within the message, points to the first octet following the extension field 
5 1248. The overall format of all extension fields within a given NTP packet is as follows. 

The type descriptor 1264 identifies the algorithm that understands the particular format of a 
given type of extension field 1248. There may be a mixture of ASN.l, binary, ASCII and printable 
data in each field, depending on the algorithm involved. There is no specific requirement on 
ordering, if more than one extension field 1248 is present. In general, schemes that require multiple 

10 fields will have to scan through all type descriptors 1264 to verify that all required fields are present 
and to determine the sequence of processing steps. 

Some fields, such as certificate and signature fields, may be considered generic across 
several different schemes, while others may be specific to each scheme. For instance, most 
schemes using PKI will use X.509 certificates, RSA signatures, and Diffie-Hellman key agreement, 

15 if any of these features are required. In order to support these schemes, the following functional 
types are supported. 

A "null field is ignored, except by the hashing algorithm. It is included for testing and 
debugging. A "certificate" field contains the X.509 certificate in ASN.l format A "generic 
signature" field contains the RSA signature in PKCS-1 encrypted block format. For this purpose, 

20 the RSA modulus and public exponent must be derived from the certificate or known by other 

means. The data to be signed is the message digest 1258 (Fig. 12(c)) included in the MAC 1250 at 
the end of the NTP message. It should be noted, however, that this does not preclude a proprietary 
signature scheme with different semantics. 

An "Autokey" field contains any Autokey data. A "scheme" field is scheme-specific. That 

25 is, it contains such variables as version ED, source ID, serial number, request/response bits and so 
forth. There may be more than one scheme field if more than one scheme is operating 
simultaneously. This could occur, for example, if the NTP Version 4 Autokey scheme is in use 
along with time-stamping service or non-repudiation service. There may be data in an extension 
field 1248 that is known only after the message digest 1250 has been computed (e.g., the signature). 

30 In order to produce a deterministic result, it is necessary to temporarily replace these data with 
zeros when the digest is computed and replace them when the final result is known. This is the 
same action specified in IPSEC documents. 

The various fields in the NTP message are parsed in the following manner. The parsing 
algorithm assumes a pointer initially positioned at the end of the unprotected header (i.e., at offset 
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48 octets). At each step the remaining payload 1270 from the pointer to the end of the message is 
considered 

If the remaining payload length is zero (i.e., the pointer is at the end of the message), then 
there is no NTP MAC and the NTP authentication scheme described above is not used If, on the 
5 other hand, extension fields 1248 have been found previously, they are processed at this time and 
may result in message authentication by other schemes. 

If the remaining payload length is less than four octets, a format error will be declared and 
the message should be considered to be unauthenticated. If the remaining payload length is not 
greater than 24 octets, the NTP authentication scheme is in use, perhaps along with any previously 

10 located extension fields 1248. The first 4-octet word in the remaining payload 1270 contains the 
key identifier 1254 used to look up the key and algorithm identifier. Depending on the particular 
algorithm identifier, the expected MAC length is checked against the actual remaining length. If 
the lengths agree, the message is processed as described above. If not, a format error will be 
declared and the message should be considered to be unauthenticated. Following processing of the 

15 MAC 1250, any extension fields 1248 are processed. This may involve separately signing or 
encrypting the message digest 1258 located in the MAC 1250. 

The remaining payload length must be greater than 24 octets. An extension field 1248 will 
be present. If an extension field 1248 was found prior to this one in the NTP message, and the 
earlier extension field 1248 was padded to a 4-octet alignment rather than 8, the pointer must be 

20 backtracked by 4 octets. The pointer may then be moved over the next extension field 1248 by 
adding the contents of its 2-octet length word to the current pointer value. The, the pointer will be 
rounded up to the next 8-octet alignment. 

Another relevant Internet Draft is entitled "Internet X.509 Public Key Infrastructure Time 
Stamp Protocol (TSP), Adams, C, P. Cain, D. Pinkas, and R. Zuccherato, October 1999 ("<draft- 

25 ietf-pkix-time-stamp-04.txt>")- This draft allows a time stamping service to prove that a datum 
existed before a particular time and can be used as a Trusted Third Party (TIT). 

In order to associate a datum with a particular point in time, a Time Stamp Authority (TS A) 
may need to be used. This Trusted Third Party provides a "proof-of-existence" for this particular 
datum at an instant in time. 

30 The TS A's role is to time stamp a datum to establish evidence indicating the time at which 

the datum existed. This can then be used, for example, to verify that a digital signature was applied 
to a message before the -corresponding certificate was revoked, thus allowing a revoked public key 
certificate to be used for verifying signatures created prior to the time of revocation. This can be an 
important public key infrastructure operation. The TSA can also be used to indicate the time of 
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submission when a deadline is critical, or to indicate the time of transaction for entries in a log. An 
exhaustive list of possible uses of a TSA is beyond the scope of this document. 

The TSA is a TTP that creates time stamp tokens in order to indicate that a datum existed at 
a particular point in time. TSAs are required: (1) to provide a trustworthy source of time; (2) not to 
5 include any identification of the requesting entity in the time stamp tokens; (3) to include a 

monotonically incrementing value of the time for each newly generated time stamp token; (4) to 
include a monotonically incrementing integer for each newly generated time stamp token; (5) to 
produce a time stamp token upon receiving a valid request from the requester, when it is possible; 
(6) to include within each time stamp token an identifier to uniquely indicate the security policy 

10 under which the token was created; (7) to only time stamp a hash representation of the datum, i.e. a 
data imprint associated with a one-way collision resistant hash-function OID; (8) to examine the 
OED of the one-way collision resistant hash-function and to verify that the hashvalue length is 
consistent with the hash algorithm; (9) not to examine the imprint being time stamped in any way; 
(10) to sign each time stamp token using a key generated exclusively for this purpose and have this 

15 property of the key indicated on the corresponding certificate; and (1 1) to include additional 

information in the time stamp token, if asked by the requester using the extensions field, only for 
the extensions that are supported by the TSA. If this is not possible, the TSA shall respond with an 
error message. 

As the first message of this mechanism, the requesting entity requests a time stamp token by 
20 sending a request (which is or includes a TimeStampReq, as defined below) to the Time Stamping 
Authority. As the second message, the Time Stamping Authority responds by sending a response 
(which is or includes a TimeStampToken, as defined below) to the requesting entity. 

Upon receiving the response (which is or includes a TimeStampResp, as defined below), the 
requesting entity verifies the status error returned in the response and if no error is present verifies 
25 the various fields contained in the TimeStampToken and the validity of the digital signature of the 
TimeStampToken. In particular, it verifies that what was time stamped corresponds to what was 
requested to be time stamped. The requester then must verify that the TimeStampToken contains 
the correct certificate identifier of the TSA, the correct data imprint and the correct hash algorithm 
OID. It must then verify the timeliness of the response by verifying either the time included in the 
30 response against a local trusted time reference, if one is available, and/or the value of the "nonce" 
(a large random number with a high probability that it is generated by the client only once) included 
in the response against the value included in the request. Since the TSAs certificate may have been 
revoked, the status of the certificate should then be checked (e.g. f by checking the appropriate 
CRL) to verify that the certificate is still valid. 
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The client application should then check the policy field to determine whether or not the 
policy under which the token was issued is acceptable for the application. The client may ignore 
this field if that is acceptable for the intended application. The TSA must sign all time stamp 
messages with one or more keys reserved specifically for that purpose. The corresponding 
5 certificate must contain only one instance of the extended key usage field extension as defined in 
RFC 2459, Section 4.2.1.13 with KeyPurposelD having value id-kp-timeS tamping. 

A TSAs certificate may contain an Authority Information Access extension (as defined in 
RFC 2459) in order to convey the method of contacting the TSA. The accessMethod field in this 
extension must contain the OID id-ad-time-stamping: 

10 id-ad OBJECT IDENTIFIER its { id-pkix 48 } 

id-ad- time -s tamping OBJECT IDENTIFIER its { id-ad X } 

The value of the accessLocation field defines the transport (e.g., HTTP) used to access the TSA and 
may contain other transport dependent information (e.g., a URL). 
A time stamping request is as follows: 

IS Times tampReq s:= SEQUENCE { 

version Integer { vl(l) }, 

messagelmprint Me s a age Imprint , 

--a hash algorithm OID and the hash value of the data to be 

--time stamped 

20 regPolicy [0] Policylnformation OPTIONAL, 

nonce [1] Integer OPTIONAL, 

extensions [2] EXPLICIT Extensions OPTIONAL 

} 

The version field describes the version of the TimeStamp request. 
25 The messagelmprint field must contain the hash of the datum to be time stamped. The hash 

is represented as an OCTET STRING. Its length must match the length of the hash value for that 
algorithm (e.g., 20 bytes for SHA-1 or 16 bytes for MD5). 

Messagelmprint x : = SEQUENCE { 

hashAlgoritha Algoritbmldentif ier, 

30 hashedMessage OCTET STRING } 

The hash algorithm indicated in the hashAlgorithm field must be a known hash algorithm that is 
both one-way and collision resistant. 

The reqPolicy field, if included, indicates the policy under which the TimeStampToken 
should be provided. Policylnformation is defined in Section 4.2.1 .5 of RFC 2459. The nonce, if 
35 included, facilitates verification of the timeliness of the response when no local clock is available. 
The nonce is a large random number with a high probability that it is generated by the client only 



WO 01/03363 



PCTAJS00/18259 



once (e.g.,. a 64 bits integer). In such a case, the same nonce value should be included in the 
response or the response should be rejected. The extensions field is a generic way to add additional 
information to the request in the future, and is defined in RFC 2459. If an extension, whether it is 
marked critical or not critical, is used by a requester but is not recognized by a time stamping 
5 server, the server must not issue a token and return a failure (badRequest). 

The time stamp request does not identify the requester, as this information is not validated 
by the TSA. In situations where the TSA requires the identity of the requesting entity, alternate 
identification /authentication means have to be used (e.g., CMS encapsulation or TLS 
authentication described in RFC 2246. 
10 A time stamping response is as follows: 

TimeS tampResp ::a SEQUENCE { 

status PKI Status Info, 

timeS tampToken TimeStampToken OPTIONAL 

} 

1 5 The status uses the same error codes that are defined in Section 3.2.3 of RFC 25 1 0, but adds two 
new ones. 

When the PKIStatusInfo contains the value zero, a Time Stamp Token will be present 
Otherwise, the status indicates the reason why the time stamp request was rejected. 

PKIFailurelnf o : : = BXTSTRXNG { 
20 badAlg (0), 

unrecognized or unsupported Algorithm Identifier 
badRequest (2) , 

transaction not permitted or supported 
badDataFoxmat (5) , 
25 the data submitted has the wrong format 

timeNotAvailable (14) , 

the TSAs time source is not available 
addlnfoNotAvailable (15) 

the additional information requested could not be understood 
30 or is not available 

} 

These are the only values of PKIFailurelnfo that are supported. Servers in compliance with this 
draft must not produce any other values. On the other hand, compliant clients may ignore any other 
values. 

35 The statusString field of PKIStatusInfo may be used to include reason text such as 

messagelmprint field is not correctly formatted. 

If the error code returned is different from zero, then the TimeStampToken is not returned. 
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A TimeStampToken appears as follows. It is encapsulated as a SignedData construct in the 

EncapsulatedContentlnfo field 

SignedData x : o SEQUENCE { 

version CMSVersion, 

S digestAlgorithms DigestAlgorithmldentif iers, 

encapCon tentlnf o EncapsulatedContentlnfo , 

certificates [0] IMPLICIT Certif icateSet OPTIONAL, 

crls [1] IMPLICIT 

Certif icateRevocationLists OPTIONAL , 

10 signerlnf os Signerlnf os } 

Signer Infos : : = SET OF Signerlnf o 

EncapsulatedContentlnfo : : = SEQUENCE { 
IS eContentType Con tent Type , 

eContent [0] EXPLICIT OCTET STRING OPTIONAL } 

Con tent Type : x = OBJECT IDENTIFIER 

20 The above fields of type EncapsulatedContentlnfo have the following meanings. eContentType is 
an object identifier that uniquely specifies the content type. For a time stamping token, it is defined 
as: 

id-ct-TSTInfo OBJECT IDENTIFIER : s= {id-ct 4} 
with: 

25 id-ct OBJECT IDENTIFIER : t= { id- am i me 1 } 

id- ami me OBJECT IDENTIFIER : := { iso(l) member -body (2) 

us (840) rsadsi (113549) pkcs (1) pkcs-9(9) 16 } 

eContent is the content itself, carried as an octet string. The eContent content type has ASN.l type 
TSTInfo. 

30 The time stamp token must not contain any signatures other than the signature of the TSA. 

The certificate identifier of the TSA certificate shall be included as a signed attribute. 

TSTInfo : : = SEQUENCE { 

version Integer {▼!(!)}, 

poli cy Poli cylnf orma t ion , 

35 messagelmprint Mess age Imprint, 

-- MUST have the same value as the similar field in 
-- TimeS tampReg 

serialNumber Integer, 

genTime General izedTime , 



WO 01/03363 



PCT/US00/18259 



accuracy [0] Accuracy OPTIONAL, 

nonce [1] Integer OPTIONAL, 

-- MUST be present if the similar field was present 
--in TimeStampReq. In that case it must have the same value. 
5 tsa [2] GeneralName OPTIONAL, 

extensions [3] EXPLICIT Extensions OPTIONAL 

} 

The version field describes the version of the Times tamp token. 

Timestamping servers in conformance with this draft must be able to provide version 1 
10 Timestamp tokens. Among the optional fields, only the nonce field needs to be supported, if the 

similar field is present in TimeStampReq. Conforming time-stamping requesters must be able to 

recognize version 1 Timestamp tokens with all the optional fields present, but are not mandated to 

understand the semantics of any extension, if present. 

The policy field must indicate the TSAs policy under which the response was produced. If 
IS a similar field was present in the TimeStampReq, then it must have the same value, otherwise an 

error (badRequest) must be returned. This policy may include the following types of information, 

although this list is certainly not exhaustive. 

1 . The conditions under which the time-stamp may be used 

2. The availability of a time-stamp log, to allow later verification that a time-stamp 
20 token is authentic. 

The messagelmprint must have the same value as the similar field in TimeStampReq, 
provided that the size of the hash value matches the expected size of the hash algorithm identified 
in hashAlgorithm. The serialNumber field shall include a strictly monotonically increasing integer 
from one TimeStampToken to the next (e.g., 45, 236, 245, 1023, ...). This guarantees that each 

25 token is unique and allows to compare the ordering of two time stamps from the same TSA. This is 
useful in particular when two time-stamps from the same TSA bear the same time. This field also 
provides the way to build a unique identifier to reference the token. It should be noted that the 
monotonic property must remain valid even after a possible interruption (e.g., crash) of the service. 
genTime is the time at which the timestamp has been created by the TSA. The ASN.l 

30 GeneralizedTime syntax can include fraction-of-second details. Such syntax, without the 

restrictions from Section 4.1.2.5.2 of RFC 2459, where GeneralizedTime is limited to represent 
time with one second, may to be used here. However, when there is no need to have a precision 
better than the second, then GeneralizedTime with a precision limited to one second should be used 
as in RFC 2459. 

35 The syntax is: YYYYMMDDhhmmss{.s...]Z 
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Example: 19990609001326.34352Z 

X.690 | ISO/IEC 8825-1 provides the restrictions for a DER-encoding. 

The encoding terminates with a "Z". The decimal point element, if present, is the point 
option".". The fractional-seconds elements, if present, shall omit all trailing 0's. If the elements 
5 correspond to 0, they shall be wholly omitted, and the decimal point element also is omitted. 
Midnight (GMT) is represented in the form: "YYYYMMDD000000Z" where "YYYYMMDD" 
represents the day following the midnight in question. 
Here are a few examples of valid representations: 

"19920521000000Z" 
10 "19920622123421Z" 

"19920722132100 . 3Z" 

Accuracy represents the time deviation around the UTC time contained in GeneralizedTime. 

Accuracy : : = CHOICE { 

seconds [1] INTEGER, 
15 millis [2] INTEGER (1..999), 

micros [3] INTEGER (1..999) 

} 

By adding the accuracy value to the GeneralizedTime, an upper limit of the time at which the time- 
stamp has been created by the TSA can be obtained. In the same way, by subtracting the accuracy 

20 to the GeneralizedTime, a lower limit of the time at which the timestamp has been created by the 
TSA can be obtained. Accuracy is expressed as an integer, either in seconds, milliseconds 
(between 1-999) or microseconds (1-999). When the accuracy field, which is optional, is missing, 
then, by default, an accuracy of one second is meant. 

The nonce field must be present if it was present in the TimeStampReq. 

25 The purpose of the tsa field is to give a hint in identifying the name of the TSA. If present, 

it must correspond to one of the subject names included in the certificate that is to be used to verify 
the token. However, the actual identification of the entity which signed the response will always 
occur through the use of the certificate identifier (ESSCertID Attribute) which is part of the 
signerlnfo 

30 As noted herein above, extensions is a generic way to add additional information in the 

future. Extensions are defined in RFC 2459. However, version 1 only supports non-critical 
extensions. This means that conforming requesters are not mandated to understand the semantics 
of any extension. Particular extension field types may be specified in standards or may be defined 
and registered by any organization or community. 



WO 01/03363 



PCT/US00/18259 



There is no mandatory transport mechanism for TSA messages in this draft. All of the 
mechanisms described herein below are optional. 

A file containing a time-stamp message must contain only the DER encoding of one TSA 
message (i.e., there must be no extraneous header or trailer information in the file). Such files can 
5 be used to transport time stamp messages using for example, FTP. 

The following simple TCP-based protocol is to be used for transport of TSA messages. 
This protocol is suitable for cases where an entity initiates a transaction and can poll to pick up the 
results. It basically assumes a listener process on a TSA which can accept TSA messages on a 
well-defined port (IP port number 318). 
10 Typically an initiator binds to this port and submits the initial TSA message. The responder 

replies with a TSA message and/or with a reference number to be used later when polling for the 
actual TSA message response. If a number of TSA response messages are to be produced for a 
given request (e.g., if a receipt must be sent before the actual token can be produced), then a new 
polling reference is also returned. When the final TSA response message has been picked up by the 
15 initiator then no new polling reference is supplied. 

The initiator of a transaction sends a "direct TCP-based TSA message" to the recipient. The 
recipient responds with a similar message. A "direct TCP-based TSA message" consists of: 

length (32-bits), flag (8-bits) , value (defined below) 

The length field contains the number of octets of the remainder of the message (i.e., number 
20 of octets of "value" plus one). All 32-bit values in this protocol are specified to be in network byte 
order. 

Message name flag value 

tsaMsg '00' H DER-encoded TSA message 

TSA message 

25 pollRep *01' H polling reference (32 bits) , 

time-to-check-back (32 bits) 
-- poll response where no TSA message response ready; use polling 
reference value (and estimated time value) for later polling 
pollReq X 02'H polling reference (32 bits) 

30 request for a TSA message response to initial message 

negPollRep *03' H *00'H 

-- no further polling responses (i.e., transaction complete) 
partialMsgRep *04'H next polling reference (32 bits) , 

time- to -check -back (32 bits) , 
35 DER-encoded TSA message 

-- partial response (receipt) to initial message plus new polling 
-- reference (and estimated time value) to use to get next part of 



WO 01/03363 



PCIYUS00/18259 



response 

finalMsgRep '05' H DER-encoded TSA message 

— final (and possibly sole) response to initial message 
errorMsgRep '06' H human readable error message 

5 — produced when an error is detected (e.g., a polling reference 

— is received which doesn' t exist or is finished with) 

The sequence of messages which can occur is: (a) entity sends tsaMsg and receives one of pollRep, 
negPollRep, partialMsgRep or finalMsgRep in response; (b) end entity sends pollReq message and 
receives one of negPollRep, partialMsgRep, finalMsgRep or errorMsgRep in response. 
1 0 The "time-to-check-back" parameter is a 32-bit integer, defined to be the number of seconds which 
have elapsed since midnight, January 1, 1970, coordinated universal time. It provides an estimate 
of the time that the end entity should send its next pollReq. 

The following specifies a means for conveying ASN.l -encoded messages for the protocol 
exchanges via Internet mail. A simple MIME object is specified as follows: 

IS Content -Type: application/ times tamp 

Content -Transfer- Encoding: base 6 4 

«the ASN.l DKR- encoded Time Stamp message, base64-encoded» 

This MIME object can be sent and received using common MIME processing engines and provides 
a simple Internet mail transport for Time Stamp messages. 
20 One means for conveying ASN. 1 -encoded messages for the protocol exchanges via the 

HyperText Transfer Protocol is described below. In this case, a simple MIME object is specified as 
follows. 

Content-Type: application/ times tamp 

«the ASN. 1 DER- encoded Time Stamp message» 

25 This MIME object can be sent and received using common HTTP processing engines over WWW 
links and provides a simple browser-server transport for Time Stamp messages. Upon receiving a 
valid request, the server must respond with either a valid response with content type 
application/timestamp or with an HTTP error. 

When designing a TSA service, this draft has identified the following considerations that 

30 have an impact upon the validity or "trust" in the time stamp token. 

1 . When there is a reason to both believe that the TSA can no longer be trusted but the 
TSA private key has not been compromised, the authority's certificate shall be revoked. Thus, at 
any future time, the tokens signed with the corresponding key will not considered as valid. 

2. When the TSA private key has been compromised, then the corresponding 

35 certificate shall be revoked. In this case, any token signed by the TSA using that private key cannot 
be trusted anymore. For this reason, it is imperative that the TSA's private key be guarded with 
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proper security and controls in order to minimize the possibility of compromise. In case the private 
key does become compromised, an audit trail of all tokens generated by the TS A may provide a 
means to discriminate between genuine and false backdated tokens. A double time-stamp for two 
different TSAs is another way to address this issue. 

3. The TSA signing key must be of a sufficient length to allow for a sufficiently long 
lifetime. Even if this is done, the key will have a finite lifetime. Thus, any token signed by the 
TSA should be time-stamped again (i.e., if authentic copies of old CRLs are available) or notarized 
(Le. 9 if they aren't) at a later date to renew the trust that exists in the TSA's signature. Time stamp 
tokens could also be kept with an Evidence Recording Authority to maintain this trust. 

4. An application using the TSA service should be concerned about the amount of time 
it is willing to wait for a response. A "man-in-the-middle" attack can introduce delays. Thus, any 
TimeStampToken that takes more than an acceptable period of time should be considered suspect. 

One of the major use of time stamping is to time stamp a digital signature to prove that the 
digital signature was created before a given time. Should the corresponding public key certificate 
be revoked, this procedure facilitates the determination of whether the signature was created before 
or after the revocation date. The following describes one Signature Timestamp attribute that may 
be used to timestamp a digital signature. 

The following object identifier identifies the Signature Timestamp attribute: 

id-signatureTimeStainpToken OBJECT IDENTIFIER : : = { iso(l) member-body (2 ) 
us (840) rsadsi (113549) pkcs(l) pkcs-9(9) smime(16) id-aa(2) <TBD>} 

The Signature timestamp attribute value has ASN.l type SignatureTimeStampToken: 

SignatureTinteStampToken TimeStampToken 

The value of messagelmprint field within TimeStampToken will be a hash of the value of signature 
field within Signerlnfo for the signedData being time-stamped. 

The "Internet X.509 Public Key Infrastructure Time Stamp Protocol (TSP)" draft described 
above also presents an example of a possible use of the foregoing general time stamping service. It 
places a signature at a particular point in time, from which the appropriate certificate status 
information (e.g., CRLs) must be checked. This application is intended to be used in conjunction 
with evidence generated using a digital signature mechanism. 

Signatures can only be verified according to a non-repudiation policy. This policy may be 
implicit or explicit (i.e., indicated in the evidence provided by the signer). The non-repudiation 
policy can specify, among other things, the time period allowed by a signer to declare the 
compromise of a signature key used for the generation of digital signatures. Thus, a signature may 
not be guaranteed to be valid until the termination of this time period. 
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According to the "Internet X.509 Public Key Infrastructure Time Stamp Protocol (TSP)" 
draft, the following basic technique may be used to verify a digital signature. First, time-stamping 
information needs to be obtained as soon as possible after the signature has been produced {e.g., 
within a few minutes or hours). This may be done by presenting the signature to the TSA. The 
5 TSA then returns a TimeStampToken (TST) upon that signature. Next, the invoker of the service 
must verify that the TimeStampToken is correct. 

The validity of the digital signature may then be verified as follows. First, the time-stamp 
itself must be verified. It must also be verified that it applies to the signature of the signer. The 
date/time indicated by the TSA in the Time Stamping Token must then be retrieved. Then, the 

1 0 certificate used by the signer must be identified and retrieved. The date/time indicated by the TSA 
must be inside the validity period of the signer's certificate. Next, any revocation information 
about that certificate, at the date/time of the time-stamping operation, must be retrieved. Should the 
certificate be revoked, then the date/time of revocation shall be later than the date/time indicated by 
the TSA. If all the above conditions are successful, then the digital signature shall be declared as 

15 valid. 

The benefits of the methods shown in Figs. 1 1(a) and 1 1(b) may be better understood by use 
of the following example shown in Fig. 1 1(c). Consider, for example, an e-mail having a document 
embedded therein 1 156. Furthermore, consider e-mail 1 156 as having been date and time-stamped 
according to any one of the methods described herein above {e.g., the document is time-stamped a$ 

20 well as the e-mail; the document alone is time-stamped and embedded within the e-mail, the e-mail 
alone is time-stamped with the document thereafter being embedded within; or the e-mail having a 
document embedded within is time-stamped as a combination). E-mail 1 156, accordingly, has been 
time-stamped with a trusted time. It is then transmitted across network 1 158 to receiving PC 1 160. 
In the event that the receiving PC 1 160 also comprises a system 700 as described herein before, the 

25 verification of the time-stamp will be straight forward. However, if the receiving PC 1 160 includes 
no trusted source of time, the sender of e-mail can not be certain that the receiver read e-mail 1 156 
at any given trusted time. 

In accordance with yet another important aspect of the present invention, a certified e-mail 
1 156 may be sent with a return receipt requested. As is known, most e-mail software applications 

30 include the ability to send a receipt to the sender when the intended receiver has opened an e-mail 
having been sent with a request for return receipt. A sender of certified e-mail 1 156 makes such a 
request at a trusted time TCI. A relative delay time TD can be determine in conventional ways, as 
described herein above with reference to Figs. 12(a) through 12(d). Accordingly, a PC system 700 
of the present invention will add the delay time TD to TCI to compute a TC2, which is the relative 
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time certain that e-mail 1 156 was received at the receiving PC 1 160. This does not, however, give 
the sender a time certain that the receiver opened e-mail 1 156. Nevertheless, the local trusted time 
source 610 (Fig. 6) will be able to maintain an accurate time until the receiver opens e-mail 1 156. 
The opened e-mail 1 162 would trigger creation of a return receipt 1 164 in the maimers well- 
5 known to e-mail software applications developers. This receipt 1 164 would contain an uncertified 
time-stamp UC1 representing the local date and time that the receiver had opened the e-mail 1 156. 
When the PC system 700 of the sender receives that receipt 1 164, it calculates another relative time 
certain TC4, based on the local trusted time certain of its receipt TC3 and delay time TD. That is: 

TC4 = TC3-TD. 

1 0 Moreover, a fifth relative time certain is calculated by PC system 700 to "synchronize" the sender's 
and the receiver's clock. Actual synchronization does not occur. However, this fifth relative time 
certain TC5 indicates the differential in the time at the local trusted time source 610 and the time at 
the remote PC 1 160. If the time UC1 as appended to the receipt 1 164 is compared to TC4, users of 
the PC system 700 can readily establish this time differential D as follows: 

15 D = TC4-UC1. 

This differential D may then be used, at least over the short-term, to provide reasonable certainty of 
on-going communications with the receiving PC 1 160. 

Variations and modifications of the above described methods and systems according to this 
invention are possible without departing from the true spirit and scope thereof. For example, fraud 

20 prevention means 560 may be initially installed on motherboards or baseboards 800 in the manner 
described above. Alternatively, they may be retrofitted in existing PCs; or they may be installed on 
expansion cards of the PCI and ISA types supported by such motherboards and baseboards 800; or 
they may be installed in an external device such as a dongle coupled to such PCs. 

Such expansion cards and external devices, therefore, would each include a real time clock 

25 1000 set to the trusted time and having a tamper-evident label attached thereto. In that case, such 
real time clocks 1000 on the expansion cards and external devices would be adapted to bypass any 
system real time clock 830 on the motherboard or baseboard 800. They would, thus, not interfere 
with such system real time clocks 830, and would only be used to affix a trusted time-stamp to any 
or all digital data files in the foregoing manner. 

30 Conventional intrusion alarms of PCs and servers could also be coupled to provide a signal 

to the fraud prevention means 560. In that case, any activation of the signal, which would indicate 
an occurrence of an intrusion, would be used to disable operation of the fraud prevention means 
560. Fraud prevention means 560 would not only be -capable of recognizing other certificates from 
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CAs known in the PKI environment, but they would also be capable of being used in conjunction 
with any of the above described Internet protocols. 

The verification means 580 according to the present invention could, likewise, be coupled 
within fraud prevention means 560 and provide a simple means for determining that a received 
5 message that was time-stamped by a remote system 700 was, indeed, time-certified. Alternatively, 
verification means 580 may comprise any biometric device (e.g., iris scan, retina scan, finger scan, 
hand geometry, voice verification, and dynamic signature verification devices, etc.) may be used in 
order to further verify the identity of a user of a local PC system 700. Suitable such devices include 
face recognition devices manufactured and sold by Visionics Corporation, Exchange Place, New 
10 Jersey U.S. A., fingerprint readers of the SecureTouch®97 type manufactured by Biometric Access 
Corporation, Round Rock, Texas U.S.A., and multiple access devices manufactured by Keyware 
Techologies. 

Finally, the PC system 700 according to the present invention may simply comprise a stand- 
alone PC, a server, a PC or workstation coupled to a server. All that is necessary is that the PC or 
1 5 workstation and/or server include fraud prevention means 560 as previously described. 

It should, therefore, be understood that within the scope of the claims appended hereto, the 
present invention may be practiced otherwise than has been specifically described in the foregoing 
embodiments. 
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Claims 

What I claim as my invention is: 

1 . A personal computer system for maintaining a digital data file, comprising: 
a personal computer having installed therein a trusted time source; 
means for saving the file at a moment in time; 

means for retrieving from said trusted time source a date and a time corresponding 
S to said moment in time; 

means for appending said date and said time retrieved from said trusted time source 
to said saved file; 

means for signing said saved file with said date and said time retrieved from said 
trusted time source appended thereto; 
10 means for hashing said signed file to produce a digest; 

means for signing said digest with a key to produce a certificate; 
means for appending said certificate to said saved file; and 
means for saving said file with said certificate appended thereto. 

2. The personal computer system according to claim 1, further comprising means for 
verifying the authenticity of said file with said certificate appended thereto. 

3. The personal computer system according to claim 2, wherein said verification means 
comprises means for signing said saved file with said date and said time retrieved from said trusted 
time source appended thereto with an ID. 

4. The personal computer system according to claim 3, wherein said ID is selected 
from the group consisting of an ID corresponding to a user, an ID corresponding to a system used 
by said user, and an ID corresponding to an enterprise within which said user uses the personal 
computer system. 

5. The personal computer system according to claim 4, wherein said user ID is selected 
from the group consisting of a plurality of characters identifying said user, first data representing an 
iris scan of said user, second data representing a retina scan of said user, third data representing a 
finger scan of said user, fourth data representing said user's hand geometry, fifth data representing 

5 said user's voice, sixth data representing said user's signature, and combinations of said plurality of 
characters, first, second, third, fourth, fifth, and sixth data. 
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6. The personal computer system according to claim 1, wherein said trusted time 
source comprises: 

a real time clock; and 

a battery coupled to and powering said real time clock. 

7. The personal computer system according to claim 6, wherein said real time clock 
and said battery are installed on a motherboard of said personal computer. 

8. The personal computer system according to claim 6, wherein said real time clock 
and said battery are installed on a baseboard of said personal computer. 

9. The personal computer system according to claim 6, wherein said real time clock 
and said battery are installed on an expansion card adapted to be coupled to a motherboard of said 
personal computer. 

10. The personal computer system according to claim 6, wherein said real time clock 
and said battery are installed on an expansion card adapted to be coupled to a baseboard of said 
personal computer. 

1 1 . The personal computer system according to claim 6, wherein said real time clock 
and said battery are installed on an external device adapted to be coupled to said personal computer. 

12. The personal computer system according to claim 1 1 , wherein said external device 
comprises a dongle. 

13. The personal computer system according to claim 1 1, wherein said external device 
comprises a PCMCIA card. 

14. The personal computer system according to claim 1 1 , wherein said external device 
comprises a smart card. 

15. The personal computer system according to claim 1 1 , wherein said external device 
comprises a removable computer-readable medium. 
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1 6. The personal computer system according to claim 1 5, wherein said removable 
computer-readable medium is selected from the group consisting of a magnetic hard disk, a floppy 
disk, an optical disk, a CD-ROM, a CD-R, a CD-RW, a disk compliant with DVD standards, a 
magneto-optical disk, a magnetic tape, a memory chip, a carrier wave used to carry computer- 

5 readable electronic data, such as are used in transmitting and receiving an e-mail or in accessing a 
network, including the Internet, intranets, extranets, virtual private networks (VPN), local area 
networks (LAN), and wide area networks (WAN), and any other storage device used for storing 
data accessible by a computer. 

17. A method of maintaining a digital data file in a personal computer, comprising: 
providing a trusted time source in the personal computer; 

saving the file at a moment in time; 

retrieving from said trusted time source a date and a time corresponding to said 
5 moment in time; 

appending said date and said time retrieved from said trusted time source to said 

saved file; 

signing said saved file with said date and said time retrieved from said trusted time 
source appended thereto; 
10 hashing said signed file to produce a digest; 

signing said digest with a key to produce a certificate; 
appending said certificate to said saved file; and 
saving said file with said certificate appended thereto. 

18. The method according to claim 17, further comprising the step of providing tamper- 
evident means for labeling said trusted time source. 

19. The method according to claim 17, wherein said moment in time corresponds to an 
access of the digital data file. 

20. The method according to claim 17, wherein said moment in time corresponds to a 
creation of the digital data file. 

21. The method according to claim 17, wherein said moment in time corresponds to a 
modification of the digital data file. 



i 
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22. The method according to claim 1 7, wherein said moment in time corresponds to a 
receipt of the digital data file. 

23. The method according to claim 1 7, wherein said moment in time corresponds to a 
transmission of the digital data file. 

24. The method according to claim 1 7, further comprising the steps of: 
appending to an e-mail said saved file with said certificate appended thereto; 
transmitting said e-mail, with said appended saved file having said certificate 

appended thereto, to a remote computer, 
5 determining a first delay time associated with said transmission step; 

adding said first delay time to said moment in time to provide a first relative trusted 
time at which said e-mail was received by said remote computer, and 

storing said first relative trusted time in the personal computer. 

25. The method according to claim 24, further comprising the step of appending a 
request for return receipt of a message indicating a remote time at which said e-mail was opened at 
said remote computer. 

26. The method according to claim 25, wherein said e-mail has been opened at said 
remote computer at said remote time, thereby, transmitting said message, further comprising the 
steps of: 

receiving, at the personal computer at another moment in time, said message from 
5 said remote computer; 

determining a second delay time associated with the transmission of said message; 
retrieving from said trusted time source a date and a time corresponding to said other 
moment in time; 

subtracting said second delay time from said other moment in time to provide a 
10 second relative trusted time at which said message was received by the personal computer; and 
storing said second relative trusted time in the personal computer. 
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27. The method according to claim 26, further comprising the steps of: 
determining a differential between said second relative trusted time stored in the 

personal computer and said remote time; 

storing said differential in the personal computer; and 

thereafter using said stored differential to approximate third and subsequent relative 
trusted times in communications with the remote computer. 

28. The method according to claim 1 7, further comprising another digital data file and 
further comprising the steps of: 

saving said other file at a second moment in time; 

retrieving from said trusted time source a date and a time corresponding to said 
second moment in time; 

appending said date and said time retrieved from said trusted time source to said 
other saved file; 

signing said other saved file with said date and said time retrieved from said trusted 
time source appended thereto; 

hashing said signed other file to produce another digest; 

signing said other digest with a key to produce another certificate; 

appending said other certificate to said other saved file; 

saving said other file with said other certificate appended thereto; and 

appending said file with said certificate appended thereto to said other file with said 
other certificate appended thereto. 
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29. A method of maintaining a first digital data file and a second digital data file in a 
personal computer, comprising: 

providing a trusted time source in the personal computer; 
saving the first digital data file at a first moment in time; 
5 retrieving from said trusted time source a date and a time corresponding to said first 

moment in time; 

appending said date and said time retrieved from said trusted time source to said first 

saved file; 

signing said first saved file with said date and said time retrieved from said trusted 
10 time source appended thereto; 

hashing said signed first file to produce a first digest; 

signing said first digest with a key to produce a first certificate; 

appending said first certificate to said first saved file; and 

saving said first saved file with said first certificate appended thereto. 

30. The method according to claim 29, further comprising the step of appending said 
first saved file, with said first certificate appended thereto, to the second digital data file. 

31. The method according to claim 30, further comprising the steps of: 
saving the second digital data file at a second moment in time; 

retrieving from said trusted time source a date and a time corresponding to said 
second moment in time; 

5 appending said date and said time retrieved from said trusted time source to said 

second saved file; 

signing said second saved file with said date and said time retrieved from said 
trusted time source appended thereto; 

hashing said signed second file to produce a second digest; 
1 0 signing said second digest with a key to produce a second certificate; 

appending said second certificate to said second saved file; and 

saving said second saved file with said second certificate appended thereto. 
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32. The method according to claim 30, further comprising the steps of: 

saving a combination of said first saved file with said first certificate appended 
thereto and the second digital data file at a second moment in time; 

retrieving from said trusted time source a date and a time corresponding to said 
5 second moment in time; 

appending said date and said time retrieved from said trusted time source to said 

combination; 

signing said combination with said date and said time retrieved from said trusted 
time source appended thereto; 
1 0 hashing said signed combination to produce a third digest; 

signing said third digest with a key to produce a third certificate; 

appending said third certificate to said combination; and 

saving said combination with said third certificate appended thereto. 

33. The method according to claim 30, wherein the first saved file comprises an e-mail 
and the second saved file comprises a document selected from the group consisting of a word 
processing document, a spreadsheet document, a database document, an HTML document, a Web 
page, and an image. 

34. The method according to claim 33, further comprising the step of transmitting said 
e-mail with said document appended thereto. 

35. The method according to claim 29, wherein the first saved file comprises a 
document selected from the group consisting of an e-mail, a word processing document, a 
spreadsheet document, a database document, an HTML document, a Web page, and an image. 



WO 01/03363 



PCT/US00/18259 



1/10 




<D 
O) 
(0 
CO 

to 
0) 



WO 01/03363 



PCTAJS00/18259 



2/10 




( 



o 



0) 

c 
CO 

E 
o 



WO 01/03363 



PCT/US00/18259 



4/10 



400 D 




440 



f-4 

PRIOR ART 



580 



500 


1 

Computing 
Means 




Verification 
Means 






Fraud 
Prevention 
Means 






J 


Input 
Means 

/ 





560 



Fig. 5 



WO 01/03363 



PCTYUS00/18259 



5/10 



Trusted Local Time Source 



Retrieving Means 



First Appending Means 



560 First Signing Means 



Hashing Means 



Second Signing Means 



Key 



Second Appending Means 



Saving Means 



610 
620 
630 
640 
650 
660 
670 
680 
690 



Fig. 6 



580 



1 



Verification 
Means 



700 



780 




720 



3 



-f- 



560 



Fraud 
Prevention 
Means 




WO 01/03363 



PCT/US00/18259 



6/10 




WO 01/03363 



PC17US00/18259 



7/10 




1000 



1075 



1000 



1002 



1004 
1006 
1008 
1010 
1012 

1014 
1016 
1018 
1020 
1022 
1024 



10 



11 



12 



MOT 


v cc 


NC 


SQW 


NC 


NC 


ADO 


NC 


AD1 


NC 


AD2 


IRQ 


AD3 


RESET 


AD4 


DS 


AD5 


NC 


ADO 


R/W 


AD7 


AS 


"GND 


CS 



24 



1048 



23 



22 



21 



20 



19 



18 



17- 



16 



1046 
1044 
1042 
1040 
1038 
1036 
1034 
1032 



1030 



15 



1028 

14±^ 

1026 



r 



WO 01/03363 



PCT/US00/182S9 



8/10 




1164 



Fig. 11(a) 



Fig. 11(b) 



1156 




Fig. 11(c) 



WO 01/03363 PCT/US00/182S9 

9/10 

0 12 3 

01234567890123456789012345678901 
+ - + -+-+- + -+-+-+-+-+-+-+- + - + -+-+- + - + - + -+- + -+-+- + - + - + -+-+-+-+-+-+.- + 1206 
I 1202 T yP e | 1204 Code I Sequence J^S 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 1208 

I Originate Timestamp J ^ 

+ _ + _ + .+- + _ + - + - + - + - + - + - + - + - + ^^^ 1210 
I Receive Timestamp J — ^ 

;. + . + . + - + _ + . + . + . + _ + - + . + - + . + . + - + . + - + . + . + . + - + _ + . + . + _ + - + . + . + . + - + . + _Ti2i2 

| Transmit Timestamp _j ^ 

Fig. 12(a) ^ 1200 

(Offset => 0) 1228x1 2 3 

012345678 9\0 1234567890123456 78901 
+-+-+-+-+-+-+-+- +-+-■♦}-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+ 
| LI | VH | Mode | Stratum | Poll | Precision | -J234 

+^-+-+- ^-+-+-+4+ -+-+-+-+-+-+-+-+-+-+ -+4+-+-+-+-+-+-+-+-^-+-+-+-+^/ 
I M 222 M 224 M 226 Root Delay M230 M232 T"7l, 



1236 
1238 



+ - + - + - + - + - + - + - + - + - + - + - + - + - + -+- + - + - + - + -+- + -+— ► - + - + - + - + -+-+-+-+-+-+ 

| Root Dispersion 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-* 
| Reference Identifier 

+-+-+-+-+-+-+-+-+-+-+-♦-+-+-+-+-+-+ -+-+-+-+-+-+-+ -+-+-+-+-+-+-+-+ 

I I 1240 

j Reference Timestamp (64) _J — ^ 

I I 



| Originate Timestamp (64) 

i i 

+-+-+-+-+-+-+-+-+-+— f -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ -+-+-+ 

i 

| Receive Timestamp (64) 

i 
i 

l Transmit Timestamp (64) 



| 1242 



1244 



1246 



+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

| j 1248 

j Extension Fields (EF) -| ' 

// // 

I | 1250 

| Message Authenticator Code (MAC) -\ 

// // 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ -+-+- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+- + 



Fig. 12(b) ^1220 



12 3 
01234567890123456789012345678901 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 1254 
| Key Identifier (32) \J^S 

+-+-+-+-+-+-+- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+ 

I I 1258 

| Message Digest (64 or greater) | j 

II 77 

+-+-+-+-+-+-+-+--»--+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

4 



WO 01/0330 PCT/US00/18259 

10/10 

(Offset - 48) 1 2 3 

012345 6 7890123456789012345678901 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 1260 

| 1264 Type Descriptor (16) | 1268 Length (16) | 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

i I 

| Payload | 

// // 

I + + 1274 

j 1270 | Padding to 4 -octet multiple \ ^ 



1 264 ^ 1 9fift 

| Type Descriptor (16) | Length (16) -| — 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+ 

i j 

| Payload j 

'/ . - J/m 

j 1270 | Padding to 8 -octet multiple -| 

+-+-♦-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 



Fig. 12(d) 



